You observed a surge in RequestCount on an ALB and want to find the client IP addresses responsible for the traffic. Where can you retrieve the source IP addresses for requests handled by the ALB?

Elastic Load Balancer (ELB) access logs capture detailed information about requests sent to your load balancer, including the client's IP address, request type, latency, and the backend instance that processed the request. This makes them the definitive source for identifying the client IPs causing a surge in RequestCount. Auto Scaling activity logs track scaling events, not individual client requests. AWS CloudTrail logs record API calls made to AWS services, not data plane traffic through the ALB. Logs on the EC2 instances would show the IP of the ALB as the source, not the original client IP, unless specific proxy configurations are in place to forward the original IP.