Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 676 discussion

CloudTrail is for logging administrative actions, we need CloudWatch. We want the data in another AWS service (OpenSearch), not Kinesis, thus we need Firehose, not Streams.

base on the research, it should be Answer A, because question is asking for a "near real time" which Kinesis Data Stream is offering the data with less than 1 second latency. But Kinese Data Firehost is offering the data with more than 1 second. https://docs.aws.amazon.com/opensearch-service/latest/developerguide/integrations.html#integrations-kinesis https://stackoverflow.com/questions/44608274/is-there-any-difference-in-processing-times-between-aws-kinesis-firehose-and-str https://docs.aws.amazon.com/streams/latest/dev/using-other-services-cw-logs.html

base on the research, it should be Answer A, because question is asking for a "near real time" which Kinesis Data Stream is offering the data with less than 1 second latency. But Kinese Data Firehost is offering the data with more than 1 second. https://docs.aws.amazon.com/opensearch-service/latest/developerguide/integrations.html#integrations-kinesis https://stackoverflow.com/questions/44608274/is-there-any-difference-in-processing-times-between-aws-kinesis-firehose-and-str

log analysis place= aws cloudwatch log data capturing on the entire vpc=aws flow log near real time data analysis and send to OpenSearch service= kinesis data fire hose

OpenSearch patterns for CloudWatch Logs: 1) "Near Real Time": CloudWatch logs --> Subscription Filter --> Kinesis Data Firehose --> Amazon OpenSearch (option *B*) 2) "Real Time": CloudWatch logs --> Subscription Filter --> Lambda --> Amazon OpenSearch

Amazon CloudWatch Logs and VPC Flow Logs (Option B): VPC Flow Logs capture information about the IP traffic going to and from network interfaces in a VPC. By configuring VPC Flow Logs to send the log data to a log group in Amazon CloudWatch Logs, you can then use Amazon Kinesis Data Firehose to stream the logs from the log group to Amazon OpenSearch Service for analysis. This approach provides near real-time streaming of logs to the analytics service.