A web application stack uses CloudFront (web distribution), an Application Load Balancer (ALB), Amazon RDS, and EC2 in a VPC. All services have logging enabled. A SysOps administrator needs to examine HTTP (Layer 7) status codes returned by the application. Which log sources will contain those HTTP status codes? (Choose two.)

ALB access logs and CloudFront access logs are the correct choices because they record detailed information about requests made to the Application Load Balancer and CloudFront distribution, respectively, including HTTP status codes. CloudFront logs show status codes for requests served from the edge cache or forwarded to the origin. ALB logs show status codes for requests processed by the load balancer and forwarded to EC2 instances. VPC Flow Logs record network flow information (source/destination IP, ports, protocols) but not HTTP status codes. AWS CloudTrail logs API calls made to AWS services, not application-level HTTP requests or their status codes. RDS logs contain database-specific information, not HTTP status codes from the web application layer.