Which combination of steps should a DevOps engineer take to meet these requirements?
(Choose two.)
Configure a CloudWatch Logs subscription filter to use AWS Glue to transfer all logs to an S3 bucket.
Configure a CloudWatch Logs subscription filter to use Amazon Kinesis Data Firehose to stream all logs to an S3 bucket.
Configure a CloudWatch Logs subscription filter to stream all logs to an S3 bucket.
Configure the S3 bucket lifecycle policy to transition logs to S3 Glacier after 90 days and to expire logs after 3,650 days.
Configure the S3 bucket lifecycle policy to transition logs to Reduced Redundancy after 90 days and to expire logs after 3,650 days.
Explanations:
Using AWS Glue to transfer logs to S3 is not necessary for this use case, as Glue is primarily for data transformation and preparation, not for direct log archiving.
Kinesis Data Firehose can stream CloudWatch Logs directly to an S3 bucket in near real-time, making it suitable for archiving logs efficiently.
A CloudWatch Logs subscription filter cannot directly stream logs to S3 without using a service like Kinesis Data Firehose or Lambda. Thus, this option is incomplete.
An S3 bucket lifecycle policy that transitions logs to S3 Glacier after 90 days and expires logs after 3,650 days meets the requirement to archive and retain logs for 10 years, ensuring cost-effectiveness.
Transitioning logs to Reduced Redundancy Storage (RRS) does not align with the requirement for long-term storage and retention, as RRS is designed for less critical data and may not provide sufficient durability.
I categorize that the answer is:
Configure a CloudWatch Logs subscription filter to use Amazon Kinesis Data Firehose to stream all logs to an S3 bucket.