AWS Certified Database – Specialty – Question158

A company is setting up a new Amazon RDS for SQL Server DB instance. The company wants to enable SQL Server auditing on the database.
Which combination of steps should a database specialist take to meet this requirement? (Choose two.)

A. Create a service-linked role for Amazon RDS that grants permissions for Amazon RDS to store audit logs on Amazon S3.
B. Set up a parameter group to configure an IAM role and an Amazon S3 bucket for audit log storage. Associate the parameter group with the DB instance.
C. Disable Multi-AZ on the DB instance, and then enable auditing. Enable Multi-AZ after auditing is enabled.
D. Disable automated backup on the DB instance, and then enable auditing. Enable automated backup after auditing is enabled.
E. Set up an options group to configure an IAM role and an Amazon S3 bucket for audit log storage. Associate the options group with the DB instance.

Correct Answer: AE

Explanation:

Explanation:
To do this, you create an IAM role and delegate permissions so that the Amazon RDS service can use your Amazon S3 bucket.
RDS uploads the completed audit logs to your S3 bucket, using the IAM role that you provide. If you enable retention, RDS keeps your audit logs on your DB instance for the configured period of time.
Reference: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.SQL…