What should the database specialist do to meet these requirements?
(Choose two.)
Create an RDS event subscription to the audit event type.
Enable auditing of CONNECT and QUERY_DML events.
SSH to the DB instance and review the database logs.
Publish the database logs to Amazon CloudWatch Logs.
Enable Enhanced Monitoring on the DB instance.
Explanations:
An RDS event subscription only captures events related to instance state changes (e.g., backups, failovers) and doesn’t track specific database query or data changes.
Enabling auditing of CONNECT and QUERY_DML events will capture details about database connections and data modification queries, helping to identify changes.
SSH access is not available for RDS instances, as they are managed by AWS. Logs cannot be directly reviewed via SSH.
Publishing database logs to Amazon CloudWatch Logs allows for real-time monitoring and auditing of all database activity, which is ideal for identifying changes.
Enhanced Monitoring provides operating system-level metrics for the DB instance (e.g., CPU, memory), but does not track database-specific activity or changes.
As far as I can tell, the answer is:
Enable auditing of CONNECT and QUERY_DML events.