Question

A CloudOps engineer manages a fleet of Lambda functions that write verbose logs to Amazon CloudWatch Logs. The finance team reports that CloudWatch Logs storage costs have grown significantly over the past year. Investigation shows that most log groups were created with the default retention setting and contain years of data, but the compliance team only requires 90 days of retention for these operational logs. What is the MOST cost-effective action to reduce ongoing storage costs while meeting the compliance requirement?

Accepted Answer

Set a 90-day retention policy on the affected log groups so CloudWatch Logs automatically deletes log events older than 90 days.

Answer

Create an EventBridge scheduled rule that triggers a Lambda function every day to delete individual log streams older than 90 days.

Answer

Export all log groups to Amazon S3 with a lifecycle policy and delete the CloudWatch log groups entirely.

Answer

Enable a metric filter on each log group to count old log events and alarm when data exceeds 90 days.