In your LAMP application, you have some developers that say they would like access to your logs. However, since you are using an AWS Auto Scaling group, your instances are constantly being re-created. What would you do to make sure that these developers can access these log files? Choose the most appropriate answer from the options below.

Answer options:

A.Give only the necessary access to the Apache servers so that the developers can gain access to the log files.
B.Give root access to your Apache servers to the developers.
C.Give read-only access to your developers to the Apache servers.
D.Setup a CloudWatch Logs Group to store the logs. Archive these logs to an S3 bucket for developer-access.

Answer – D
One important security aspect is to never give access to actual servers. Hence Options A, B and C are just totally wrong from a security perspective.
The best option is to use the CloudWatch Logs group to archive logs. These logs can then be exported to S3.
Options A, B and C are all incorrect because you should not give access to the developers on the Apache servers.
For more information on S3, please refer to the below link
https://aws.amazon.com/documentation/s3/