
Ultimate access to all questions.
A company operates a web application on a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB), with the instances managed by an Auto Scaling group. The application uses an Amazon CloudFront distribution with the ALB as its origin. Following a recent attack, the company associated an AWS WAF web ACL with the CloudFront distribution. To analyze application attacks detected by AWS WAF, the company wants to use Amazon Athena. What solution will fulfill this requirement?
A
Configure the ALB and the EC2 instance subnets to produce VPC flow logs. Configure the VPC flow logs to deliver logs to an Amazon S3 bucket for log analysis.
B
Create a trail in AWS CloudTrail to capture data events. Configure the trail to deliver logs to an Amazon S3 bucket for log analysis.
C
Configure the AWS WAF web ACL to deliver logs to an Amazon Kinesis Data Firehose delivery stream. Configure the stream to deliver the data to an Amazon S3 bucket for log analysis.
D
Turn on access logging for the ALB. Configure the access logs to deliver the logs to an Amazon S3 bucket for log analysis.