An AWS Lambda Function Was Misused to Alter Data, and a Security

Multiple Choice

An AWS Lambda function was misused to alter data, and a Security Engineer must identify who invoked the function and what output was produced. The Engineer cannot find any logs created by the Lambda function in Amazon CloudWatch Logs. Which of the following explains why the logs are not available?

A) The execution role for the Lambda function did not grant permissions to write log data to CloudWatch Logs.
B) The Lambda function was executed by using Amazon API Gateway, so the logs are not stored in CloudWatch Logs.
C) The execution role for the Lambda function did not grant permissions to write to the Amazon S3 bucket where CloudWatch Logs stores the logs.
D) The version of the Lambda function that was executed was not current.