AWS Certified Developer – Associate — Question 213

While developing an application that runs on Amazon EC2 in an Amazon VPC, a Developer identifies the need for centralized storage of application-level logs.

Which AWS service can be used to securely store these logs?

Answer options

• A. Amazon EC2 VPC Flow Logs
• B. Amazon CloudWatch Logs
• C. Amazon CloudSearch
• D. AWS CloudTrail

Correct answer: B

Explanation

Amazon CloudWatch Logs is designed specifically for storing and monitoring log files from applications, making it the best choice for centralized storage of application logs. Amazon EC2 VPC Flow Logs is aimed at capturing network traffic flow, while Amazon CloudSearch is a search service, and AWS CloudTrail is focused on tracking account activity and API usage, none of which are suitable for storing application logs.