An online educational institute has developed a new web application for medical students. This web application is deployed on EC2 instance launched in different AZ’s in the us-west-1 region & front-ended by Application Load Balancer. For audit purposes, the Security team requires an IP Address for all students accessing this application. For this, you have been assigned to enable access logs & create an Amazon S3 bucket to save these logs.
Which of the following need to be considered while creating an Amazon S3 bucket for saving Access logs?

Answer options:

A.Amazon S3 bucket can be created in any region from that of ALB & should be only belonging to the same account as that of ALB.B.Amazon S3 bucket need to be in the same region as that of ALB & should be only belonging to the same account as that of ALB.C.Amazon S3 bucket need to be in the same region as that of ALB & can be owned by a separate account from that of ALB.D.Amazon S3 bucket can be created in any region from that of ALB & should be owned by a separate account from ALB.

Correct Answer –C
 While enabling access logs for ALB, the Amazon S3 bucket should be specified where logs are captured. Amazon S3 bucket should be in the same region as that of ALB but can be owned by different accounts.
Option A is incorrect as the Amazon S3 bucket should be in the same region as that of ELB.Option B is incorrect as the Amazon S3 bucket can be owned by a separate account as that of ELB.Option D is incorrect as the Amazon S3 bucket should be in the same region as that of ELB.For more information enabling Access Logs on ELB, refer to the following URL-
https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-access-logs.html