awslog Driver for ECS

[Mao]

In this question awslogs Log Driver send the logs to S3?

if not, do you mean that Kinesis Firehose is going to send the logs to S3?

Category: DOP – Monitoring and Logging
A leading food and beverage company is currently migrating its Docker-based application that is hosted on-premies to AWS. The application will be hosted in an Amazon ECS cluster with multiple ECS services to run its various workloads. The cluster is configured to use an Application Load Balancer to distribute traffic evenly across the tasks in your service. A DevOps Engineer was instructed to configure the cluster to automatically collect logs from all of the services and upload them to an S3 bucket for near-real-time analysis.
How should the Engineer configure the ECS set up to satisfy these requirements? (Select THREE)

Create a CloudWatch Logs subscription filter integrated with Amazon Kinesis to analyze the logs.

Capture detailed information about requests sent to your load balancer by using Detailed Monitoring in CloudWatch. Configure it to store the logs to the S3 bucket.

Create the required IAM Policy and attach it to the ecsInstanceRole. Install the Amazon CloudWatch Logs agent on the Amazon ECS instances. Use the awslogs Log Driver in the Amazon ECS task definition.

Set up Amazon Macie to analyze the access logs in the S3 bucket.
Integrate a Lambda function with CloudWatch Events to run a process every minute that invokes the CreateLogGroup and CreateExportTask CloudWatch Logs API to push the logs to the S3 bucket.

Capture detailed information about requests sent to your load balancer by enabling access logging on the Application Load Balancer. Configure it to store the logs to the S3 bucket.

[Jon-Bonso]

Hi Moa,

In this scenario, the CloudWatch Logs Agent (awslogs) will see send the logs to CloudWatch. You also have to create a CloudWatch Logs subscription filter and integrate it with Amazon Kinesis to analyze the application logs. There is also an option in CloudWatch Logs to export the logs to S3:

https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/S3ExportTasksConsole.html

For the ALB access logs, this is already pushed to the S3 bucket automatically.

Let us know if you need further assistance. The Tutorials Dojo team is dedicated to help you pass your AWS exam on your first try!

Regards,

Jon Bonso @ Tutorials Dojo

[Mao]

Thank you!!