Exam AWS Certified Developer Associate topic 1 question 301 discussion

Application-level audits are monitored by using CloudWatch. To enble ECS on Fargate to send logs on Amazon CloudWatch, we need to configure the awslogs log drive in the task definition. B is the correct answer

The correct solution is option B. Configuring the awslogs log driver in the ECS task definition will allow the application to store the logs centrally on AWS. The awslogs log driver sends logs to Amazon CloudWatch Logs, which is a managed service that provides search and analysis of log data. This solution will meet the requirements of storing the logs centrally on AWS and making them searchable. Installing the Amazon CloudWatch agent on the Amazon EC2 host or installing the ECS logs collector on the ECS hosts will not work because the application is running on AWS Fargate and not on Amazon EC2. AWS CloudTrail is not a suitable solution because it is used to record API calls made to AWS services, not application-level API calls.

Reference documentation: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_awslogs.html

Choosing B

https://docs.aws.amazon.com/AmazonECS/latest/userguide/using_awslogs.html Using the awslogs log driver: You can configure the containers in your tasks to send log information to CloudWatch Logs. If you do this, you can view the logs from the containers in your Fargate tasks.

B https://www.datadoghq.com/blog/tools-for-collecting-aws-fargate-metrics/

D https://docs.aws.amazon.com/AmazonECS/latest/developerguide/logging-using-cloudtrail.html