AWS Certified DevOps Engineer – Professional (DOP-C02) — Question 122

A company manages an application that stores logs in Amazon CloudWatch Logs. The company wants to archive the logs to an Amazon S3 bucket. Logs are rarely accessed after 90 days and must be retained for 10 years.

Which combination of steps should a DevOps engineer take to meet these requirements? (Choose two.)

Answer options

• A. Configure a CloudWatch Logs subscription filter to use AWS Glue to transfer all logs to an S3 bucket.
• B. Configure a CloudWatch Logs subscription filter to use Amazon Kinesis Data Firehose to stream all logs to an S3 bucket.
• C. Configure a CloudWatch Logs subscription filter to stream all logs to an S3 bucket.
• D. Configure the S3 bucket lifecycle policy to transition logs to S3 Glacier after 90 days and to expire logs after 3.650 days.
• E. Configure the S3 bucket lifecycle policy to transition logs to Reduced Redundancy after 90 days and to expire logs after 3.650 days.

Correct answer: B, D

Explanation

Option B is correct as using Amazon Kinesis Data Firehose allows for efficient streaming of logs from CloudWatch Logs to S3. Option D is also correct because the lifecycle policy effectively manages the storage cost by transitioning logs to S3 Glacier after 90 days and ensuring they are deleted after 10 years. Options A and C do not meet the requirements for archiving, and option E is not ideal since Reduced Redundancy is not suitable for long-term log storage.