You must centralize CloudWatch Logs into an S3 bucket in a dedicated AWS account for all current and future log groups across your organization. Which solution accomplishes this?
Choose an answer
Tap an option to check your answer.
Correct answer: In the dedicated account create a CloudWatch Logs destination and a Kinesis Data Firehose delivery stream that writes to the S3 bucket. In each account create subscription filters for existing log groups, implement a Lambda that calls PutSubscriptionFilter, and add an EventBridge rule to invoke the Lambda when CreateLogGroup events occur..
Why this is the answer
The correct solution leverages CloudWatch Logs destinations, Kinesis Data Firehose, and automation for new log groups. A CloudWatch Logs destination in the central account receives logs, and Kinesis Data Firehose delivers them to the S3 bucket. For existing log groups, subscription filters are manually created in each account. For future log groups, an EventBridge rule detects CreateLogGroup events, triggering a Lambda function to automatically create a subscription filter, ensuring all new log groups are also centralized. Incorrect options: AWS Organizations backup policies and AWS Backup are not designed for real-time streaming of CloudWatch Logs to S3 for centralized logging. They are primarily for snapshot-based backups of various AWS resources, not continuous log aggregation.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed