Which logging solution will support these requirements?
Enable Amazon CloudWatch Logs to log the EKS components. Create a CloudWatch subscription filter for each component with Lambda as the subscription feed destination.
Enable Amazon CloudWatch Logs to log the EKS components. Create CloudWatch Logs Insights queries linked to Amazon EventBridge events that invoke Lambda.
Enable Amazon S3 logging for the EKS components. Configure an Amazon CloudWatch subscription filter for each component with Lambda as the subscription feed destination.
Enable Amazon S3 logging for the EKS components. Configure S3 PUT Object event notifications with AWS Lambda as the destination.
Explanations:
Enabling Amazon CloudWatch Logs to log EKS components allows for detailed logging of activities. Using CloudWatch subscription filters, specific log events can be routed to AWS Lambda for processing, which can then evaluate the logs and publish messages to the appropriate Amazon SNS topics for notifications. This setup provides a robust solution for automated notifications based on EKS activities.
While enabling CloudWatch Logs for EKS components is valid, linking CloudWatch Logs Insights queries to EventBridge events does not directly evaluate log events in real-time or trigger Lambda functions effectively for immediate notifications. It adds unnecessary complexity and does not fulfill the requirement for automated email notifications based on specific activities.
Amazon S3 logging is not typically used for logging EKS component activities, as EKS does not log directly to S3. Additionally, configuring CloudWatch subscription filters requires the logs to be in CloudWatch, making this option inappropriate for the requirements of monitoring EKS activities and sending notifications.
Enabling S3 logging for EKS components is not applicable, as EKS does not generate logs that can be stored in S3 in the context intended here. While S3 PUT Object event notifications can invoke Lambda functions, this option does not meet the requirement of logging EKS component activities specifically for automated notifications.