How should a sysops administrator verify this?
Monitor the ALB default Amazon CloudWatch metrics. Verify that the requests contain the expected query string.
׀¡onfigure the ALB to store access logs within Amazon S3. Verify that log entries contain the expected query string.
Open the ALB logs in Amazon CloudWatch. Verify that requests contain the expected query string.
Create a custom Amazon CloudWatch metric to store requests. Verify that the metric contains the expected query string.
Explanations:
The ALB default Amazon CloudWatch metrics do not include details about query strings in HTTP requests. They provide only high-level metrics such as request count, latency, and response codes.
Enabling ALB access logs and storing them in S3 will capture detailed HTTP request data, including query strings. This allows verification of the query strings received by the ALB.
ALB logs are not available in CloudWatch directly. Access logs must be configured to store in S3, not CloudWatch, for detailed request inspection.
While creating a custom CloudWatch metric could help track specific data, it would require manual parsing of the request, which is not the default way to capture query string information. Access logs in S3 are a more direct and suitable method.
I estimate that the answer is:
׀¡onfigure the ALB to store access logs within Amazon S3. Verify that log entries contain the expected query string.