A company is deploying a new application that uses Amazon EC2 instances. The company needs a solution to query application logs and AWS account API activity.
Which solution will meet these requirements?
A.
Use the Amazon CloudWatch agent to send logs from the EC2 instances to Amazon CloudWatch Logs. Configure AWS CloudTrail to deliver the API logs to Amazon S3. Use CloudWatch to query both sets of logs.
B.
Use the Amazon CloudWatch agent to send logs from the EC2 instances to Amazon CloudWatch Logs. Configure AWS CloudTrail to deliver the API logs to CloudWatch Logs. Use CloudWatch Logs Insights to query both sets of logs.
C.
Use the Amazon CloudWatch agent to send logs from the EC2 instances to Amazon Kinesis. Configure AWS CloudTrail to deliver the API logs to Kinesis. Use Kinesis to load the data into Amazon Redshift. Use Amazon Redshift to query both sets of logs.
D.
Use the Amazon CloudWatch agent to send logs from the EC2 instances to Amazon S3. Use AWS CloudTrail to deliver the API logs to Amazon S3. Use Amazon Athena to query both sets of logs in Amazon S3.
B is correct
A - wrong because CloudWatch is not a query tool.
C - Wrong because CloudWatch agent cant send logs directly to Kinesis. Should be from CloudWatch log
D - Wrong because CloudWatch agent cant send logs directly to S3. Should be from CloudWatch log to firehorse to S3
Explanation:
Option B provides a comprehensive solution for querying application logs and AWS account API activity. The Amazon CloudWatch agent is used to send logs from the EC2 instances to Amazon CloudWatch Logs, allowing easy access to application logs. AWS CloudTrail is configured to deliver the API logs to CloudWatch Logs, enabling monitoring and analysis of AWS account activity. Finally, CloudWatch Logs Insights is utilized to query and analyze both sets of logs efficiently.
B is correct: <query application logs and AWS account API activity> means we need cloudwatch log and cloud trail
C and D: cloudwatch agent cannot directly send logs to S3 or Kinesis.
A: Cloudwatch query works only on cloudwatch, not S3
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
ogwu2000
Highly Voted 1 year, 3 months agohaazybanj
Highly Voted 1 year, 3 months agothanhnv142
Most Recent 9 months agoProfXsamson
1 year, 4 months agoOrganizedChaos25
1 year, 5 months agodevnv
1 year, 5 months ago