Due to compliance regulations, management has asked you to provide a system that allows for cost-effective long-term
storage of your application logs and provides a way for support staff to view the logs more quickly. Currently your log
system archives logs automatically to Amazon S3 every hour, and support staff must wait for these logs to appear in
Amazon S3, because they do not currently have access to the systems to view live logs. What method should you use
to become compliant while also providing a faster way for support staff to have access to logs?
A.
Update Amazon S3 lifecycle policies to archive old logs to Amazon Glacier, and add a new policy to push all log entries to Amazon
SQS for ingestion by the support team.
B.
Update Amazon S3 lifecycle policies to archive old logs to Amazon Glacier, and use or write a service to also stream your application
logs to CloudWatch Logs.
C.
Update Amazon Glacier lifecycle policies to pull new logs from Amazon S3, and in the Amazon EC2 console, enable the CloudWatch
Logs Agent on all of your application servers.
D.
Update Amazon S3 lifecycle policies to archive old logs to Amazon Glacier. key can be different from the tableEnable Amazon S3
partial uploads on your Amazon S3 bucket, and trigger an Amazon SNS notification when a partial upload occurs.
E.
Use or write a service to stream your application logs to CloudWatch Logs. Use an Amazon Elastic Map Reduce cluster to live stream
your logs from CloudWatch Logs for ingestion by the support team, and create a Hadoop job to push the logs to S3 in five-minute
chunks.
I think B is the answer.
The question mentions to cost-effective (Lifecycle to Glacier ) and quickly view logs (Stream logs to CloudWatch).
I agree. B is the answer.
Agreed. B is the best
Why B?
People want to view logs on S3. B never mentions about this.
“write a service to also stream your application
logs to CloudWatch Logs” in B says faster retrieval of logs in cloud watch.
Yes, ‘B’ must be the answer.
B
B
Folks, there is button “Show Answer”. We’d better focus on that to discuss. As “Show Answer” says, the correct choice is E.
Every Show Answer is not the Correct Answer. Thats the reason people discuss here to conclude for the best. E is not cost effective.
Question says “providing a faster way” so correct answer should be E
E says “push the logs to S3 in five-minute chunks”. This is not faster than “stream your application logs to CloudWatch Logs”.
However, you must also then give your staff access to CloudWatch Logs.
B is how I would solve this, with the addition of making the CloudWatch logs available, but E will do the job as requested. CloudWatch storage is compliant, 5 minutes is quicker than 1 hour. But E is messy.
Still, B does not mention how the logs get from CloudWatch to S3. It can be arranged, but isn’t quick, so that’s not how the support staff would receive them. And it isn’t mentioned in the answer.
The question is “become compliant while also providing a faster way”
So B is correct not E.
Answer is B.
Answer is B. Because streaming is more quicker way to pump the logs.