A company's application uses Network Load Balancers, Auto Scaling groups, Amazon EC2 instances, and databases deployed in an Amazon VPC. The company wants to capture near real-time information about traffic to and from the network interfaces in the VPC and send that information to Amazon OpenSearch Service for analysis. Which solution meets these requirements?
Choose an answer
Tap an option to check your answer.
Correct answer: Create a log group in Amazon CloudWatch Logs. Configure VPC Flow Logs to send the log data to the log group. Use Amazon Kinesis Data Firehose to stream the logs from the log group to OpenSearch Service..
Why this is the answer
The correct solution involves using VPC Flow Logs to capture network traffic information. VPC Flow Logs can publish data directly to Amazon CloudWatch Logs, which acts as a centralized log repository. From CloudWatch Logs, Amazon Kinesis Data Firehose is an excellent choice for streaming data to Amazon OpenSearch Service because it is a fully managed service that automatically scales and handles data transformation, buffering, and delivery without requiring custom code or administration. Incorrect options: Using Kinesis Data Streams directly from CloudWatch Logs is possible but requires more configuration and management than Data Firehose for this specific use case of streaming to OpenSearch Service. AWS CloudTrail records API calls and account activity, not network traffic flow data within a VPC. Therefore, sending VPC Flow Logs to CloudTrail is incorrect.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed