Final answer:
To improve logging and monitoring of an application moved to AWS EC2 without changing the app code, AWS CloudWatch Logs is the best service to use, offering collection, monitoring, and alarms for log data.
Step-by-step explanation:
If you're an architect looking to improve the logging and monitoring capabilities of an application when moving it to AWS EC2 instances, without modifying the application code, the best service to use would be AWS CloudWatch Logs. CloudWatch Logs can collect and monitor logs from your EC2 instances, and you have the ability to set up real-time monitoring of the logs, set alarms and retain log data for as long as you need. It integrates with other AWS services for more advanced monitoring scenarios, and it doesn't require changes to existing application code, making it the ideal solution for your requirement.