What should the Security Engineer do to troubleshoot this issue?

A Security Engineer is troubleshooting an issue with a company’s custom logging application. The application logs are written to an Amazon S3 bucket with event notifications enabled to send events lo an Amazon SNS topic. All logs are encrypted at rest using an IAM KMS CMK. The SNS topic is subscribed to an encrypted Amazon SQS queue. The logging application polls the queue for new messages that contain metadata about the S3 object. The application then reads the content of the object from the S3 bucket for indexing.

The Logging team reported that Amazon CloudWatch metrics for the number of messages sent or received is showing zero. No togs are being received.

What should the Security Engineer do to troubleshoot this issue?

A) Add the following statement to the IAM managed CMKs:

B) Add the following statement to the CMK key policy:

C) Add the following statement to the CMK key policy:

D) Add the following statement to the CMK key policy:

A . Option A
B . Option B
C . Option C
D . Option D

View Answer

Answer: D