A security team ingests roughly 2 TB of application and firewall logs per day. Analysts need to run interactive full-text searches (e.g., finding all events containing a specific IP or error string across arbitrary time ranges) and build near-real-time operational dashboards with sub-second response for common queries. They also want built-in alerting when certain patterns spike. Which AWS data store best fits these requirements?