AWS Certified DevOps Engineer - Professional DOP-C02 — Topic 1 Question 417

Question

A company's applications run on Amazon EC2 instances and use AWS Lambda functions in multiple AWS accounts. All EC2 instances have the Amazon CloudWatch agent installed. All accounts belong to the same organization in AWS Organizations. The company has created a dedicated central log account. All logs that the applications produce must be sent to a central location. The logs must be encrypted with keys that the company manages. Which solution meets these requirements with the LEAST operational overhead?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Create an Amazon S3 bucket in the central log account. Create an Amazon Data Firehose stream in each account. Set the S3 bucket as the destination of the Firehose streams. Create a log subscription in each account wit... Amazon S3 provides durable, scalable object storage that is fully managed.

AWS Certified DevOps Engineer - Professional DOP-C02 — Question 417