A company has deployed AWS Network Firewall in a VPC and needs to deliver Network Firewall flow logs to an Amazon OpenSearch Service cluster with the lowest possible latency. Which solution meets this requirement?
Choose an answer
Tap an option to check your answer.
Correct answer: Create an Amazon Kinesis Data Firehose delivery stream with the Amazon OpenSearch Service cluster as the destination. Configure the Network Firewall flow logs to use this Kinesis Data Firehose delivery stream as the log destination..
Why this is the answer
Kinesis Data Firehose is the most suitable option because it directly integrates with Network Firewall for log delivery and supports Amazon OpenSearch Service as a direct destination. This serverless approach minimizes latency and operational overhead for near real-time ingestion. The S3-SNS-Lambda solution introduces multiple hops and processing delays, increasing latency. Direct delivery to OpenSearch from Network Firewall is not a supported feature. While Kinesis Data Streams can be used, it requires a consumer application (like a Lambda function or an EC2 instance) to pull data and push it to OpenSearch, adding complexity and latency compared to Firehose's direct integration.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed