Which AWS service records, tracks, and audits configuration changes made to your AWS resources?

AWS Config is the correct answer because it continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired baselines. This enables auditing, security analysis, and troubleshooting. AWS Shield is a managed distributed denial of service (DDoS) protection service. AWS Identity and Access Management (IAM) helps you securely manage access to AWS services and resources. Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS.