SAA-C03 Q692 · Networking

Question

A company's application uses Network Load Balancers, Auto Scaling groups, Amazon EC2 instances, and databases that are deployed in an Amazon VPC. The company wants to capture information about traffic to and from the network interfaces in near real time in its Amazon VPC. The company wants to send the information to Amazon OpenSearch Service for analysis. Which solution will meet these requirements?

Accepted Answer

Option B is correct because it chains together three services in the right way:

1. **VPC Flow Logs → CloudWatch Logs**: VPC Flow Logs natively supports two destinations — CloudWatch Logs log groups and Amazon S3 buckets. CloudWatch Logs is the correct near-real-time destination (not CloudTrail).

2. **CloudWatch Logs → Kinesis Data Firehose**: CloudWatch Logs has a native **subscription filter** feature that can stream log data to Kinesis Data Firehose in near real time. This is a well-established integration pattern.

3. **Kinesis Data Firehose → OpenSearch Service**: Firehose has a **native, built-in delivery destination** for Amazon OpenSearch Service. It handles batching, buffering, retries, and even backup to S3 automatically — no custom code required.

This pipeline satisfies all re

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips