Which combination of steps should the company take next to meet this requirement?
(Choose two.)
Enable logging for the web ACL. Associate the web ACL with the Amazon Kinesis data stream.
Enable logging for the web ACL. Associate the web ACL with the Amazon Kinesis Data Firehose delivery stream.
Configure log filtering for the web ACL. Associate the web ACL with the Amazon Kinesis Data Firehose delivery stream.
Create an Amazon Kinesis data stream in any AWS Region. Specify the S3 bucket as the destination for the data stream.
Create an Amazon Kinesis Data Firehose delivery stream in the same AWS Region as the web ACL. Specify the S3 bucket as the destination for the delivery stream.
Explanations:
Enabling logging for the web ACL does not involve associating it with a Kinesis data stream; this setup would not send logs directly to S3 as required.
Enabling logging for the web ACL and associating it with a Kinesis Data Firehose delivery stream is correct, as Firehose can deliver logs directly to S3.
Configuring log filtering is optional for AWS WAF logging; it helps control which requests are logged but does not address comprehensive logging requirements.
Creating a Kinesis data stream alone is insufficient, as it doesn’t support direct S3 delivery; Kinesis Data Firehose is needed to deliver logs to S3.
Creating a Kinesis Data Firehose delivery stream in the same AWS Region and specifying the S3 bucket as the destination meets the logging and storage needs.
I judge that the answer is:
Enable logging for the web ACL. Associate the web ACL with the Amazon Kinesis Data Firehose delivery stream.