Amazon CloudWatch Logs is the primary AWS service for centralizing application and system logs. For containerized microservices, the standard and most effective approach is to configure a log driver (e.g., awslogs for Amazon ECS) to forward container logs to CloudWatch. Creating a distinct log stream for each microservice instance within a shared log group provides a scalable and organized method for aggregation. This structure allows developers to easily isolate, search, and analyze logs from specific microservices while maintaining a central repository, directly addressing the need for a scalable, central logging solution for application logs.

B: AWS CloudTrail is used for auditing AWS API calls and account activity, not for capturing logs generated by the application's internal code.

C: VPC Flow Logs capture metadata about IP network traffic (source/destination IP, ports, etc.) within a VPC, not the content of application logs.

D: AWS Cloud Map is a service discovery tool that helps microservices find and connect to each other; it is not a logging solution.

1. Amazon CloudWatch Logs User Guide: Under "Concepts

" it defines a log stream as "a sequence of log events that share the same source." It further explains

"Each separate source of logs in CloudWatch Logs makes up a separate log stream." This supports the practice of using a separate stream for each microservice. (Source: AWS Documentation

Amazon CloudWatch Logs User Guide

"Logs concepts"

Section: "Log groups and log streams").

2. Amazon Elastic Container Service Developer Guide: The documentation for the awslogs log driver specifies its behavior: "The awslogs log driver sends container logs to Amazon CloudWatch Logs. In Amazon CloudWatch Logs

log events from each container instance are sent to different log streams in a log group." This directly validates the pattern described in the correct answer for containerized microservices. (Source: AWS Documentation

Amazon Elastic Container Service Developer Guide

"Logging and monitoring in Amazon ECS"

Section: "Using the awslogs log driver").

3. AWS CloudTrail User Guide: The introduction states

"AWS CloudTrail is an AWS service that helps you enable operational and risk auditing

governance

and compliance of your AWS account. Actions taken by a user

role

or an AWS service are recorded as events in CloudTrail." This confirms its purpose is unrelated to application logging. (Source: AWS Documentation

AWS CloudTrail User Guide

"What Is AWS CloudTrail?").