A company has many Amazon S3 buckets across many different AWS accounts. A company has a new compliance and audit requirement where all the S3 buckets server access log should be collected and centralized into an Audit AWS account.
How would you design this solution?

Answer options:

A.Collect all S3 buckets server access logs in separate S3 buckets per account. Enable replication in the S3 server access log buckets to copy the logs to a centralized destination S3 bucket in the Audit account.
B.Directly enable the server access logs for the S3 buckets in all the AWS accounts to a centralized destination S3 bucket in the Audit account.
C.Collect all S3 buckets server access logs in one S3 bucket per account. Enable replication in the S3 server access log buckets to copy the logs to a centralized destination S3 bucket in the Audit account.
D.Collect all S3 buckets server access logs in one S3 bucket per account. In the Audit AWS account, create a Lambda function to get the new logs from these S3 buckets and save the files in a centralized S3 bucket.

Correct Answer : C
Option A is incorrect because in each AWS account, you only need an S3 bucket to save the server access logs.
Option B is incorrect because for the server access logs, you can only configure the target S3 bucket in the same AWS account.
Option C is CORRECT because it meets all the requirements for the solution. All the S3 server access logs from each AWS account have been replicated to the audit account.
Option D is incorrect because the Lambda function is not required. You can directly enable replication to copy the logs to the S3 bucket in the Audit account.