Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Amazon SOA-C03 Exam - Topic 3 Question 16 Discussion

A company's CloudOps engineer is troubleshooting communication between the components of an application. The company configured VPC flow logs to be published to Amazon CloudWatch Logs. However, there are no logs in CloudWatch Logs.What could be blocking the VPC flow logs from being published to CloudWatch Logs?
A) The IAM policy attached to the IAM role for the flow log is missing the logs:CreateLogGroup permission.
B) The IAM policy attached to the IAM role for the flow log is missing the logs:CreateExportTask permission.
C) The VPC is configured for IPv6 addresses.
D) The VPC is peered with another VPC in the AWS account.

Amazon SOA-C03 Exam - Topic 3 Question 16 Discussion

Actual exam question for Amazon's SOA-C03 exam
Question #: 16
Topic #: 3
[All SOA-C03 Questions]

A company's CloudOps engineer is troubleshooting communication between the components of an application. The company configured VPC flow logs to be published to Amazon CloudWatch Logs. However, there are no logs in CloudWatch Logs.

What could be blocking the VPC flow logs from being published to CloudWatch Logs?

Show Suggested Answer Hide Answer
Suggested Answer: A

VPC Flow Logs require permissions to create log groups and log streams in Amazon CloudWatch Logs. If the IAM role associated with the flow log lacks the logs:CreateLogGroup permission, CloudWatch Logs cannot be created and no logs will appear.

Option B is unrelated because CreateExportTask is used for exporting logs, not publishing them. IPv6 configuration and VPC peering do not prevent flow logs from being delivered.

Ensuring the IAM role has the correct CloudWatch Logs permissions resolves the issue.


by Leigha at Jun 16, 2026, 09:00 PM

Limited Time Offer

25%

Off

Get Premium SOA-C03 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Twila
21 days ago
What about B? Export task permission could also be a problem.
upvoted 0 times
...
Tamar
26 days ago
I agree, A makes sense. Without CreateLogGroup, no logs can be created.
upvoted 0 times
...
Fletcher
1 month ago
I think it's A. Missing permission is a common issue.
upvoted 0 times
...
Marta
1 month ago
I thought VPC flow logs always worked, this is surprising!
upvoted 0 times
...
Samira
1 month ago
D) could be a factor, but I think it's more about permissions.
upvoted 0 times
...
Afton
2 months ago
Wait, are we sure it's not a configuration issue?
upvoted 0 times
...
Tiffiny
2 months ago
I disagree, C) shouldn't affect logging.
upvoted 0 times
...
Lanie
2 months ago
A) sounds right, missing permissions can definitely block logs.
upvoted 0 times
...
Tasia
2 months ago
I wonder if the peering of VPCs could affect log publishing, but I don't recall that being a common issue in the scenarios we practiced.
upvoted 0 times
...
Jacinta
2 months ago
I recall a practice question about VPC flow logs, and I think the configuration for IPv6 addresses might not be the problem, so I would lean towards options A or B.
upvoted 0 times
...
Kimbery
2 months ago
I'm not entirely sure, but I feel like option B might also be relevant since exporting logs requires specific permissions too.
upvoted 0 times
...
Brandon
3 months ago
I remember studying IAM roles and permissions, so I think option A could be the issue if the role lacks the logs:CreateLogGroup permission.
upvoted 0 times
...

Save Cancel