SOA-C02 · Question #690
A company is using an Amazon EC2 instance to inspect inbound traffic. The EC2 instance runs Amazon Linux and has the Amazon CloudWatch agent installed and configured. The company needs to ingest…
The correct answer is C. Create a CloudWatch Logs log group and log stream. Set up IAM permissions for the EC2 E. Create a metric filter for the log group. Configure a filter pattern for the errors. Create a. By creating a CloudWatch Logs log group (and a log stream) and granting the EC2 instance’s IAM role permission to publish to it, the existing CloudWatch Agent can send both metrics and application logs directly into CloudWatch without any intermediate S3 or Lambda workflows…
Question
A company is using an Amazon EC2 instance to inspect inbound traffic. The EC2 instance runs Amazon Linux and has the Amazon CloudWatch agent installed and configured. The company needs to ingest metrics and logs from the EC2 instance into CloudWatch. The company also needs to receive notification when a specific number of errors occur for rejected web management requests. Which combination of steps will meet these requirements with the MOST operational efficiency? (Choose two.)
Options
- ACreate an Amazon S3 bucket to store the logs. Configure an S3 event notification that occurs
- BCreate an Amazon Simple Queue Service (Amazon SQS) queue. Add the queue as the
- CCreate a CloudWatch Logs log group and log stream. Set up IAM permissions for the EC2
- DCreate an AWS Lambda function to process the logs from CloudWatch. Configure the Amazon $3
- ECreate a metric filter for the log group. Configure a filter pattern for the errors. Create a
How the community answered
(19 responses)- A11% (2)
- B5% (1)
- C79% (15)
- D5% (1)
Explanation
By creating a CloudWatch Logs log group (and a log stream) and granting the EC2 instance’s IAM role permission to publish to it, the existing CloudWatch Agent can send both metrics and application logs directly into CloudWatch without any intermediate S3 or Lambda workflows. With the logs in CloudWatch Logs, you can define a metric filter that looks for your “rejected web management request” error pattern. A CloudWatch Alarm on that custom metric can then notify you, via an SNS topic, when the error count crosses your threshold. This uses native CloudWatch capabilities and avoids extra glue services.
Topics
Community Discussion
No community discussion yet for this question.