A business intelligence application runs on Amazon Elastic Container Service (Amazon ECS) on AWS Fargate. Application-level audits require a searchable log of all API calls from users to the…

Question

Options

• AInstall the Amazon CloudWatch agent on the Amazon EC2 host that runs Fargate.
• BConfigure the awslogs log driver in the ECS task definition.
• CConfigure AWS CloudTrail for the ECS containers.
• DInstall the ECS logs collector on the ECS hosts.

• A
  15% (4)
• B
  74% (20)
• C
  7% (2)
• D
  4% (1)

Explanation

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_awslogs.html Configuring the awslogs log driver in the ECS task definition will allow the application to store the logs centrally on AWS. The awslogs log driver sends logs to Amazon CloudWatch Logs, which is a managed service that provides search and analysis of log data. This solution will meet the requirements of storing the logs centrally on AWS and making them searchable. Installing the Amazon CloudWatch agent on the Amazon EC2 host or installing the ECS logs collector on the ECS hosts will not work because the application is running on AWS Fargate and not on Amazon EC2. AWS CloudTrail is not a suitable solution because it is used to record API calls made to AWS services, not application-level API calls.

No community discussion yet for this question.