A company needs a solution to capture every API call made to its Amazon S3 objects. What should a SysOps administrator configure to meet this requirement?

Creating an AWS CloudTrail trail and enabling data event logging for S3 objects is the correct solution because CloudTrail records API calls and related events made to your AWS account, including data plane operations like GetObject, PutObject, and DeleteObject for S3. This provides a comprehensive audit trail of all API activity. Turning on S3 bucket metrics provides operational data like request counts and data transfer, not individual API call details. Enabling S3 server access logging captures detailed records for requests made to an S3 bucket, but it's delivered as log files to another S3 bucket, which requires additional processing to analyze. AWS IAM Access Analyzer for S3 helps identify resources that are accessible from outside your account but does not log individual object access events.