DEA-C01 Question 362
Single answerYou are designing a logging solution for an application hosted on Amazon EC2 instances. The application generates large volumes of structured log data that must be retained for 1 year for compliance purposes. The logs should be searchable for troubleshooting and analytics. What is the most cost-effective and scalable solution to achieve this?
- A
Stream application logs to Amazon CloudWatch Logs and configure a 1-year retention policy.
- B
Stream application logs to an Amazon S3 bucket and use S3 Lifecycle policies to transition logs to S3 Glacier after 1 year.
- C
Stream application logs to Amazon Elasticsearch Service (Amazon OpenSearch Service) and configure a 1-year retention policy.
- D
Stream application logs to an Amazon S3 bucket, and use Amazon Athena to query the logs for analytics.
Show answer and explanation
Correct answer: D
Explanation
The most cost-effective and scalable solution is to stream application logs to Amazon S3 for storage and use Amazon Athena for querying the logs. S3 offers low-cost, durable storage, and Athena provides an on-demand query engine without requiring a dedicated infrastructure for search and analytics. This approach balances cost, scalability, and the need for searchable logs.
- A. Incorrect.
Storing logs in Amazon CloudWatch Logs can be costly for high volumes of data over a long retention period, making it less cost-effective for large-scale log storage.
- B. Incorrect.
Storing logs in S3 and transitioning them to S3 Glacier after 1 year is cost-effective for long-term storage but would not meet the requirement for searchable logs during the retention period.
- C. Incorrect.
Amazon Elasticsearch Service (Amazon OpenSearch Service) provides excellent search and analytics capabilities but can become expensive for storing large volumes of logs over a 1-year period.
- D. Correct.
Streaming logs to an S3 bucket is cost-effective for large-scale storage, and using Athena allows you to perform on-demand queries without needing a dedicated search cluster, making it both scalable and cost-efficient.