Answer-first summary for fast verification
Answer: Create an Amazon Kinesis Data Firehose delivery stream that includes the Amazon OpenSearch Service (Amazon Elasticsearch Service) cluster as the destination. Configure flow logs for the firewall Set the Kinesis Data Firehose delivery stream as the destination for the Network Firewall flow logs.
To deliver AWS Network Firewall flow logs to an Amazon OpenSearch Service (Amazon Elasticsearch Service) cluster in the shortest possible time, the most efficient solution involves using Amazon Kinesis Data Firehose. Kinesis Data Firehose is a fully managed service for real-time data streaming to destinations such as Amazon S3, Amazon Redshift, and Amazon OpenSearch Service. It can directly stream data to Amazon OpenSearch Service, making it the fastest and most straightforward method for this requirement. Option B suggests creating a Kinesis Data Firehose delivery stream with the Amazon OpenSearch Service cluster as the destination and configuring the Network Firewall flow logs to use this delivery stream as their destination. This approach eliminates the need for intermediate steps like using S3 and Lambda, which are suggested in Option A, and directly streams the logs to the OpenSearch Service, ensuring the shortest possible delivery time. Options C and D are not viable because AWS Network Firewall flow logs cannot be directly sent to Amazon OpenSearch Service without an intermediary service like Kinesis Data Firehose, and using a Kinesis data stream (Option D) would require additional processing to load the data into OpenSearch Service, which is not as efficient as using Kinesis Data Firehose.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
A company has implemented an AWS Network Firewall within a VPC. A network engineer must design a solution to send Network Firewall flow logs to the company’s Amazon OpenSearch Service (Amazon Elasticsearch Service) cluster as quickly as possible.
What solution will fulfill these requirements?
A
Create an Amazon S3 bucket. Create an AWS Lambda function to load logs into the Amazon OpenSearch Service (Amazon Elasticsearch Service) cluster. Enable Amazon Simple Notification Service (Amazon SNS) notifications on the S3 bucket to invoke the Lambda function. Configure flow logs for the firewall. Set the S3 bucket as the destination.
B
Create an Amazon Kinesis Data Firehose delivery stream that includes the Amazon OpenSearch Service (Amazon Elasticsearch Service) cluster as the destination. Configure flow logs for the firewall Set the Kinesis Data Firehose delivery stream as the destination for the Network Firewall flow logs.
C
Configure flow logs for the firewall. Set the Amazon OpenSearch Service (Amazon Elasticsearch Service) cluster as the destination for the Network Firewall flow logs.
D
Create an Amazon Kinesis data stream that includes the Amazon OpenSearch Service (Amazon Elasticsearch Service) cluster as the destination. Configure flow logs for the firewall. Set the Kinesis data stream as the destination for the Network Firewall flow logs.
No comments yet.