A company hosts multi-tier applications on AWS and must, for compliance and security, track configuration changes on its AWS resources and record a history of API calls made to these resources. What should a solutions architect do to meet these requirements?
Choose an answer
Tap an option to check your answer.
Correct answer: Use AWS Config to track configuration changes and AWS CloudTrail to record API calls..
Why this is the answer
AWS Config is designed to assess, audit, and evaluate the configurations of your AWS resources, making it ideal for tracking configuration changes over time and ensuring compliance. AWS CloudTrail, on the other hand, records API calls made to your AWS account, providing a history of actions taken by users, roles, or AWS services. This combination directly addresses the requirements. Using CloudTrail for configuration changes and Config for API calls is incorrect as it reverses their primary functions. CloudWatch is a monitoring service that collects logs and metrics, but it does not inherently track configuration changes or record API call history in the same way Config and CloudTrail do.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed