Exam AWS Certified Database - Specialty topic 1 question 84 discussion

B&C https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.Concepts.PostgreSQL.html#USER_LogAccess.PostgreSQL.log_retention_period To set the retention period for system logs, use the rds.log_retention_period parameter. You can find rds.log_retention_period in the DB parameter group associated with your DB instance. The unit for this parameter is minutes. For example, a setting of 1,440 retains logs for one day. The default value is 4,320 (three days). The maximum value is 10,080 (seven days). Your instance must have enough allocated storage to contain the retained log files. To retain older logs, publish them to Amazon CloudWatch Logs. For more information, see Publishing PostgreSQL Logs to CloudWatch Logs. https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.Concepts.PostgreSQL.html#USER_LogAccess.PostgreSQL.PublishtoCloudWatchLogs

BC are correct. A is wrong, can not change default param group E is wrong, can not update postgresql.conf file on RDS, maybe can do on EC2 ?

you can not alter default parameter group , i read the documentation of rds and there is no integration to export logs to s3

Clearly B&C as per this AWS URL - https://aws.amazon.com/premiumsupport/knowledge-center/track-failed-login-rds-postgresql/

Why not B&D . There is no need to analyze the logs in Cloudwatch.They have to be retained in 180 days. Isn't storing data in S3 cheaper than storing them in Cloudwatch ?

To meet the logging and retention requirements, the following steps should be taken: Update the log_connections parameter in the default parameter group to enable connection logging. Enable publishing of database engine logs to Amazon CloudWatch Logs and set the event expiration to 180 days. This will allow the logging of all database connection requests to be retained for 180 days.

why A,E? this is misleading there is no way you can edit postgresql.conf in RDS... correct is B&C

B. Create a custom parameter group, update the log_connections parameter, and associate the parameter with the DB instance C. Enable publishing of database engine logs to Amazon CloudWatch Logs and set the event expiration to 180 days

B and C. A wrong: Parameter groups Each Amazon RDS PostgreSQL instance is associated with a parameter group that contains the engine specific configurations. The engine configurations also include several parameters that control PostgreSQL logging behavior. AWS provides the parameter groups with default configuration settings to use for your instances. However, to change the default settings, you must create a clone of the default parameter group, modify it, and attach it to your instance. To set logging parameters for a DB instance, set the parameters in a DB parameter group and associate that parameter group with the DB instance. For more information, see Working with DB parameter groups.

B and C for sure.

BC final answer

Ans: BC

B and C

Yes B&C

BC correct answer

Answer is B and C

agreed with B&C export logs to Cloudwatch Logs