Topic 1 Question 313
3 つ選択A security team sets up a workflow that invokes an AWS Step Functions workflow when Amazon EventBridge matches specific events. The events can be generated by several AWS services. AWS CloudTrail records user activities.
The security team notices that some important events do not invoke the workflow as expected. The CloudTrail logs do not indicate any direct errors related to the missing events.
Which combination of steps will identify the root cause of the missing event invocations?
Enable EventBridge schema discovery on the event bus to determine whether the event patterns match the expected schema.
Configure Amazon CloudWatch to monitor EventBridge metrics and Step Functions metrics. Set up alerts for anomalies in event patterns and workflow invocations.
Configure an AWS Lambda logging function to monitor and log events from EventBridge to provide more details about the processed events.
Review the Step Functions execution history for patterns of failures or timeouts that could correlate to the missing event invocations.
Review metrics for the EventBridge failed invocations to ensure that the IAM execution role that is attached to the rule has sufficient permissions.
Verify that the Step Functions workflow has the correct permissions to be invoked by EventBridge.
ユーザの投票
コメント(3)
A,B,F The best steps to identify the root cause of the missing event invocations are enabling schema discovery to ensure the event structure is correct, monitoring EventBridge and Step Functions metrics to detect anomalies, and verifying that the Step Functions workflow has the correct permissions to be invoked by EventBridge. These actions will help to narrow down the issue effectively and efficiently.
👍 2uncledana2024/11/18- 正解だと思う選択肢: ABE
I'd say E instead of F. The EventBridge rule contains the IAM execution role, that needs the permissions to invoke the step function. The permissions is not given at the step function side (no resource-based policy, see https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html)
👍 2Impromptu2024/11/22 - 正解だと思う選択肢: ABE
Agree with the execution role approach
👍 2luisfsm_1112024/12/10
シャッフルモード