{"question":{"id":39451,"htmlId":"question39451","kind":"SingleChoice","specVersion":null,"questionHtml":"

Your operations team has been streaming AWS WAF web ACL logs through an Amazon Kinesis Data Firehose delivery stream to CloudWatch Logs. A recent AWS update now lets one network-protection service send its full rule-match logs straight to a CloudWatch Logs log group, allowing you to retire the Firehose stream. Which service gained this direct logging capability?

","descriptionHtml":"

As of December 6 2021, AWS WAF can deliver web ACL traffic logs directly to a CloudWatch Logs log group or an Amazon S3 bucket. Before this release, AWS WAF required an Amazon Kinesis Data Firehose stream as an intermediary. Network Firewall and Route 53 Resolver DNS Firewall already supported direct delivery to CloudWatch Logs, so they do not represent a new capability. Therefore, AWS WAF is the service that now lets you eliminate the extra Firehose component.

","answers":[{"id":2568540,"html":"

AWS Network Firewall

","isCorrect":false},{"id":2568542,"html":"

AWS Shield Advanced

","isCorrect":false},{"id":2568539,"html":"

AWS WAF web ACL

","isCorrect":true},{"id":2568541,"html":"

Route 53 Resolver DNS Firewall

","isCorrect":false}],"textInput":null,"matching":null,"objectiveId":1918,"objectiveTitle":"Networking and Content Delivery","nextQuestionUrl":"/study/questions/soa-c03/a-company-runs-a-fleet-of-20-amazon-ec2-m5-4xlarge-instances-in-an-auto/37992?HideScore=false&ObjectiveMode=RoundRobbinObjectives","questionUrl":"/study/questions/soa-c03/your-operations-team-has-been-streaming-aws-waf-web-acl-logs-through-an/39451","followUpPrompts":[{"id":278235,"prompt":"What is AWS WAF and what does it do?","response":"AWS WAF (Web Application Firewall) is a service designed to help protect web applications against common attack patterns such as SQL injection or cross-site scripting (XSS). It allows users to set up rules (web ACLs) that filter and control inbound and outbound web traffic to your applications. These rules can be customized to block or allow specific requests based on IP addresses, HTTP headers, URI strings, or other request characteristics. It ensures enhanced security while still enabling high performance for web applications deployed on AWS services such as Amazon CloudFront, Application Load Balancer, and API Gateway."},{"id":278236,"prompt":"Why is Kinesis Data Firehose used in logging setups?","response":"Amazon Kinesis Data Firehose is a managed service used for streamlined data collection and delivery. It captures data, transforms it (if required), and sends it reliably to storage or analytics services such as Amazon S3, Redshift, ElasticSearch, or CloudWatch Logs. Prior to December 6, 2021, AWS WAF required this intermediate service when transmitting web ACL logs to CloudWatch Logs. This was necessary to format and route logs efficiently. The recent update allows WAF to directly send logs to CloudWatch Logs, simplifying setups and reducing costs by eliminating the need for Firehose."},{"id":278237,"prompt":"What is the difference between AWS WAF and AWS Network Firewall?","response":"AWS WAF protects web applications by inspecting HTTP and HTTPS requests. It focuses on web-layer attacks and uses web ACL rules to detect and mitigate threats like SQL injections or XSS. AWS Network Firewall, conversely, is designed for protecting resources within virtual private clouds (VPCs) by inspecting and filtering network traffic. It operates at the network level and provides stateful inspection, intrusion prevention, and full packet filtering based on rule sets. While both improve security, WAF targets application security, whereas Network Firewall is tailored for network-level security within a VPC."}],"presentationMode":false,"hideFeedbackForm":false,"hideResponseBadges":false,"setId":null,"skipSaveResponse":false},"canVote":false,"streak":{"value":null,"title":null,"launchConfetti":false,"isRecord":false},"id":"crucial-react-143dae54f6244da099b752f6600eb57f"}

AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question

Report Issue