A company is deploying a critical application on two Amazon EC$2$ instances in a VPC Failed client connections to the EC$2$ instances must be logged according to company policy.What is the MOST cost$-$e$$ective solution to meet these requirements'?

A $.$ Move the EC$2$ instances to a dedicated VPC Enable VPC Flow Logs with a $$lter on the deny action Publish the $$ow logs to Amazon CloudWatch Logs

B $.$ Move the EC$2$ instances to a dedicated VPC subnet Enable VPC Flow Logs for the subnet with a $$lter on the reject action Publish the $$ow logs to an Amazon Kinesis Data Firehose stream with a data delivery to an Amazon S$3$ bucket

C $.$ Enable VPC Flow Logs, $$ltered for rejected tra$$c for the elastic network interfaces associated with the

instances Publish the $$ow logs to an Amazon Kinesis Data Firehose stream with a data delivery to an Amazon S$3$ bucket

D $.$ Enable VPC Flow Logs, $$ltered for rejected tra$$c for the elastic network interfaces associated with the instances Publish the $$ow logs to Amazon CloudWatch Logs