Which combination of steps should the database specialist take to meet this requirement?
(Choose two.)
Set the audit_logs cluster parameter to enabled.
Enable DocumentDB log export to Amazon CloudWatch Logs.
Enable Enhanced Monitoring for DocumentDB.
Enable AWS CloudTrail for DocumentDB.
Use AWS Config to monitor the state of DocumentDB.
Explanations:
Enablingaudit_logsfor DocumentDB allows logging of key events, which is essential for security auditing.
Exporting logs to CloudWatch Logs enables centralized storage and access, helping review logs even after deletion.
Enhanced Monitoring provides real-time metrics but doesn’t log data changes or deletions.
CloudTrail can log management events but does not capture DocumentDB data changes or deletions specifically.
AWS Config monitors configuration changes but does not provide detailed database event logs.
From my perspective, the answer is:
Set the audit_logs cluster parameter to enabled.