A real estate company utilizes Amazon Workspaces across seven VPCs, each located in a different AWS Region, to deliver corporate-managed desktop services to its global real estate agents. To comply with a new requirement, the company’s cloud-based SIEM system must analyze DNS queries from the Workspaces to identify the domains accessed by these Workspaces. The SIEM system supports both poll and push methods for data and log collection. What is the most cost-effective solution a network engineer should implement to fulfill these requirements?