A company runs an application on EC2 instances behind an Application Load Balancer (ALB) with the instances in an Auto Scaling group. To comply with security standards, the company must collect all application access details including response codes, request paths, latencies, and client IPs, and be able to query that data for performance analysis. Which solution satisfies these requirements?

Enabling access logs on the ALB directly captures all application access details, including response codes, request paths, latencies, and client IPs, as required. Storing these logs in an S3 bucket provides durable and scalable storage. Amazon Athena can then be used to query this data directly from S3 for performance analysis without needing to load it into another database. VPC Flow Logs record network flow information for ENIs, not application-level details like request paths or response codes. VPC Traffic Mirroring captures raw network traffic, which would require significant processing to extract application-level details and would be overly complex for this requirement. CloudWatch detailed monitoring on EC2 instances provides metrics and system logs, but not the specific application access details (like client IPs and request paths) that the ALB access logs provide.