A company developed a new elections reporting website that uses Amazon Kinesis Data Firehose to deliver full logs from AWS WAF to an Amazon S3 bucket. The company is now seeking a low-cost option to…

Question

Options

• AUse an AWS Glue crawler to create and update a table in the Glue data catalog from the logs.
• BCreate a second Kinesis Data Firehose delivery stream to deliver the log files to Amazon
• CCreate an AWS Lambda function to convert the logs into .csv format.
• DCreate an Amazon EMR cluster and use Amazon S3 as the data source.

• A
  73% (11)
• B
  7% (1)
• C
  13% (2)
• D
  7% (1)

Explanation

Using an AWS Glue crawler to automatically create and update a table in the AWS Glue Data Catalog (Option A) is the lowest-cost, least-development-effort solution. Once the Glue crawler registers the WAF log schema in the catalog, analysts can use Amazon Athena (serverless, pay-per-query) to run SQL queries against the S3 logs and Amazon QuickSight for visualizations - forming a fully serverless analytics stack with no infrastructure to manage. This is ideal for infrequent analysis. Option B involves sending logs to a second destination like OpenSearch, adding cost and complexity. Option C only converts data format but provides no query or visualization capability. Option D uses Amazon EMR, which requires cluster provisioning, higher cost, and more administration - all disproportionate for infrequent log analysis.

No community discussion yet for this question.