A global conglomerate wants to consolidate its logs from several AWS accounts into a single security account for long-term auditing and threat detection. How can they achieve this most efficiently?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Amazon CloudWatch Logs Destination (Cross-account log subscription)

CloudWatch Logs allows you to create a cross-account destination to real-time stream logs from many accounts into a single centralized Kinesis data stream or Firehose in a security...

📋Part of AWS Certified Solutions Architect – Professional (SAP-C02) · AWS Certification Practice
Real Exam ScenarioAmazon CloudWatch

A global conglomerate wants to consolidate its logs from several AWS accounts into a single security account for long-term auditing and threat detection. How can they achieve this most efficiently?

✓ Correct Answer & ExplanationAmazon CloudWatch

Correct Answer

Amazon CloudWatch Logs Destination (Cross-account log subscription)

Why This Answer Is Correct

CloudWatch Logs allows you to create a cross-account destination to real-time stream logs from many accounts into a single centralized Kinesis data stream or Firehose in a security account.

📚 What This Question Tests

This question evaluates your knowledge of Amazon CloudWatch — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon CloudWatch is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.