DBS-C01 Monitoring and Troubleshooting — All Questions With Answers

Refer to the exhibit.

From Amazon CloudWatch Logs:

2023-04-01T12:00:00Z [ERROR] [Client] Authentication failed for user 'app_user' from host '10.0.1.50' using method 'mysql_native_password'
2023-04-01T12:01:00Z [ERROR] [Client] Access denied for user 'app_user'@'10.0.1.50' (using password: YES)
2023-04-01T12:02:00Z [ERROR] [Client] Access denied for user 'app_user'@'10.0.1.50' (using password: YES)

Refer to the exhibit. 

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "dynamodb:GetItem",
        "dynamodb:PutItem"
      ],
      "Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/MyTable"
    },
    {
      "Effect": "Deny",
      "Action": "dynamodb:*",
      "Resource": "*"
    }
  ]
}

Refer to the exhibit.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "dynamodb:PutItem",
        "dynamodb:GetItem",
        "dynamodb:DeleteItem",
        "dynamodb:Scan",
        "dynamodb:Query"
      ],
      "Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/Orders",
      "Condition": {
        "ForAllValues:StringEquals": {
          "dynamodb:LeadingKeys": ["CustomerID"]
        }
      }
    }
  ]
}

Refer to the exhibit.

```
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "rds:DescribeDBInstances",
                "rds:ListTagsForResource"
            ],
            "Resource": "arn:aws:rds:us-east-1:123456789012:db:mydb"
        },
        {
            "Effect": "Allow",
            "Action": "rds:CreateDBSnapshot",
            "Resource": "arn:aws:rds:us-east-1:123456789012:snapshot:*"
        }
    ]
}
```

Refer to the exhibit.

```
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "rds:DescribeDBInstances",
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": "rds:CreateDBInstance",
      "Resource": "*"
    },
    {
      "Effect": "Deny",
      "Action": "rds:DeleteDBInstance",
      "Resource": "arn:aws:rds:us-east-1:123456789012:db:production-db"
    }
  ]
}
```

Refer to the exhibit.

```
# CloudWatch Logs log group: /aws/rds/cluster/mycluster/error
# Log stream: production-2024-05-01
2024-05-01T10:00:00Z [ERROR] [MY-000001] [Server] Table 'mydb.temp_data' is marked as crashed and should be repaired
2024-05-01T10:01:00Z [ERROR] [MY-000002] [InnoDB] Database page corruption on disk or a failed file read of page
```

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowLambdaInvocation",
      "Effect": "Allow",
      "Action": "lambda:InvokeFunction",
      "Resource": "arn:aws:lambda:us-east-1:123456789012:function:MyFunction"
    },
    {
      "Sid": "AllowDynamoDBRead",
      "Effect": "Allow",
      "Action": [
        "dynamodb:GetItem",
        "dynamodb:Query"
      ],
      "Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/MyTable"
    }
  ]
}