A company must determine who accessed an AWS service and what actions were taken during a specific time period. Which AWS service provides this audit trail information?
Choose an answer
Tap an option to check your answer.
Correct answer: AWS CloudTrail.
Why this is the answer
AWS CloudTrail is the correct answer because it provides a comprehensive record of actions taken by a user, role, or an AWS service in AWS. It logs API calls, management console actions, and other events, including who made the request, the services accessed, the actions performed, and when the event occurred. This makes it ideal for security analysis, resource change tracking, and compliance auditing. Amazon CloudWatch monitors resources and applications but doesn't provide an audit trail of actions. AWS Security Hub is a security posture management service that aggregates security findings but doesn't log individual actions. Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS, not an audit logging service.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed