A travel company built a web application that uses Amazon Simple Email Service (Amazon SES) to send email notifications to users. The company needs to enable logging to help troubleshoot email delivery issues. The company also needs the ability to do searches that are based on recipient, subject, and time sent.
Which combination of steps should a solutions architect take to meet these requirements? (Choose two.)
To meet the requirements of logging email delivery issues and performing searches based on recipient, subject, and time sent, the solutions architect should use an Amazon SES configuration set with Amazon Kinesis Data Firehose as the destination to send logs to an Amazon S3 bucket. Additionally, Amazon Athena can be used to query these logs in the S3 bucket for the necessary details such as recipient, subject, and time sent. This combination ensures that the logs are stored in a searchable format and that an effective querying method is in place.
A & C. Cloudtrail does not track the emails.
A & C is the correct answer.
https://aws.amazon.com/blogs/messaging-and-targeting/how-to-log-amazon-ses-details-using-amazon-cloudwatch/
It cannot be D&E because SES Event data with Cloudwatch is not able to retrieve recipient, mail headers, and timestamp, this is what it can as per this article: https://docs.aws.amazon.com/ses/latest/dg/event-publishing-retrieving-cloudwatch.html A&C is a better choice as it is able to retrieve the information the questions is asking as per this article: https://docs.aws.amazon.com/ses/latest/dg/event-publishing-retrieving-firehose-contents.html
Athena can not direct query Cloudwatch log, so C is correct instead of E.