AWS Certified Advanced Networking – Specialty ANS-C00 – Question297

You manage a webserver that serves a webpage on AWS infrastructure. You utilize an Application Load Balancer, CloudFront, S3, and some other AWS services for this site. You are only responsible for the server and you don't have access to the AWS console or API.
You need to find out what IPs are accessing your website. What is the best way to achieve this?

A.
Ask someone with IAM permissions to view the Flow Logs to give you access.
B. View the access logs. They already show this information.
C. Run "curl http://169.254.169.254/latest/meta-data/access_log
D. Add "X-Forwarded For" to the access logs and view the access logs.

Correct Answer: D

Explanation:

Explanation:
Add "X-Forwarded For" to the access logs and view the access logs is the best answer here. IAM permissions could work, but not necessary, the curl command queries metadata, not access logs.