Which AWS service records and evaluates resource configuration changes and can automate remediation actions?

AWS Config continuously monitors and records your AWS resource configurations, allowing you to assess, audit, and evaluate the configurations of your AWS resources. It can also automate remediation actions for non-compliant resources, ensuring your environment adheres to desired settings. AWS Secrets Manager securely stores and manages secrets like API keys and database credentials, but doesn't track resource configurations. AWS CloudTrail logs API calls and events made in your AWS account, providing an audit trail for security analysis, not configuration management. AWS Trusted Advisor provides recommendations for cost optimization, performance improvement, security, fault tolerance, and service limits, but it doesn't record configuration changes or automate remediation.