An EC2 instance that was used for development is now unreachable and no longer listed in the AWS Management Console. Which AWS service can you use to identify what action caused the instance to become inaccessible?
Choose an answer
Tap an option to check your answer.
Correct answer: AWS CloudTrail.
Why this is the answer
AWS CloudTrail is the correct choice because it records API calls and related events made by an AWS account, including actions taken through the AWS Management Console, SDKs, command-line tools, and other AWS services. This allows you to track who did what, when, and from where, making it ideal for identifying the action that caused the EC2 instance to become inaccessible or disappear. Amazon CloudWatch Logs collects and monitors logs from various AWS services and applications, but it doesn't inherently track API call history. AWS Security Hub aggregates security findings from multiple AWS services but doesn't provide the granular event history needed to pinpoint a specific action. Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS, not a service for tracking API call history.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed