Explanation:
Option D is the correct answer because configuring the CloudWatch log group retention policy to retain logs for 3 years ensures compliance with the 3-year retention policy. Option A only prevents deletion but does not ensure the logs are retained for 3 years. Option B does not meet the 3-year retention requirement as it deletes logs after 3 years. Option C is not applicable as AWS Backup does not support backing up CloudWatch log groups.
Ultimate access to all questions.
Your company is using Amazon CloudWatch to monitor its AWS resources. You need to design a solution that ensures the retention of CloudWatch log groups for a minimum of 3 years. Which of the following steps should you take to achieve this objective?
A
Enable S3 Object Lock on the CloudWatch log groups to prevent deletion for 3 years.
B
Create a lifecycle policy for the CloudWatch log groups to transition them to Glacier after 2 years and then delete them after 3 years.
C
Use AWS Backup to create a backup plan for the CloudWatch log groups with a 3-year retention period.
D
Configure the CloudWatch log group retention policy to retain logs for 3 years.
No comments yet.