A company needs to log all requests made to its Amazon Bedrock API. The company must retain the logs securely for 5 years at the lowest possible cost. Which combination of AWS service and storage…

Question

Options

• AAWS CloudTrail
• BAmazon CloudWatch
• CAWS Audit Manager
• DAmazon S3 Intelligent-Tiering
• EAmazon S3 Standard

• A
  74% (35)
• B
  15% (7)
• C
  2% (1)
• E
  9% (4)

Explanation

Explanation

AWS CloudTrail (A) is the correct logging service because it automatically captures API calls made to AWS services, including Amazon Bedrock, providing a complete audit trail of who made requests, when, and from where. Amazon S3 Intelligent-Tiering (D) is the ideal storage class for long-term retention (5 years) at the lowest cost because it automatically moves data between access tiers based on usage patterns, eliminating the need to pay for frequent access pricing when logs are rarely retrieved.

Amazon CloudWatch (B) is primarily for metrics, performance monitoring, and application logs - not API audit trails, and its long-term storage costs are higher than S3. AWS Audit Manager (C) helps assess compliance frameworks but does not directly capture or log API requests. Amazon S3 Standard (E) stores data reliably but charges a consistent higher price regardless of access frequency, making it more expensive than Intelligent-Tiering for logs that are rarely accessed over 5 years.

Memory Tip: Think "CloudTrail = API detective" (it trails every API call) and "Intelligent-Tiering = smart saver" (it automatically saves money on infrequently accessed long-term data). When you see "log API calls + long retention + lowest cost," immediately think CloudTrail + S3 Intelligent-Tiering.

No community discussion yet for this question.