Your company`s security team starts to configure firewall rules in AWS WAF to filter and monitor the HTTP(S) requests. You need to monitor the web ACLs and rules using Amazon CloudWatch. The CloudWatch metrics to be monitored include AllowedRequests, BlockedRequests and PassedRequests. In terms of these CloudWatch metrics, which of the following statements is true?

Answer options:

A.These CloudWatch metrics are kept for 7 days in the console.
B.These CloudWatch metrics contain the details of the processed requests.
C.These CloudWatch metrics are delivered in near real-time.
D.These CloudWatch WAF metrics are delivered with a five-minutes delay.

Correct Answer: C
Option A is incorrect because the CloudWatch console limits the search of metrics to 2 weeks.
Option B is incorrect because the CloudWatch metrics do not include the request details. Users need to enable AWS WAF logs for full and detailed information.
Option C is CORRECT because the WAF CloudWatch metrics are emitted in near real-time. This is stated in the following reference.
Option D is incorrect because these CloudWatch WAF metrics do not have a five-minutes delay.
References:
https://d1.awsstatic.com/whitepapers/guidelines-implementing-aws-waf.pdf
https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html