Which AWS service or feature supports governance, compliance, and risk auditing of AWS accounts?

Question

Options

• AMulti-factor authentication (MFA)
• BAWS Lambda
• CAmazon Simple Notification Service (Amazon SNS)
• DAWS CloudTrail

• B
  5% (1)
• D
  95% (21)

Explanation

AWS CloudTrail is specifically designed for governance, compliance, and risk auditing by recording all API calls and account activity across your AWS infrastructure, creating a detailed audit trail of who did what, when, and from where. This log history enables security analysis, resource change tracking, and compliance reporting - making it the go-to service for auditing purposes.

Why the distractors are wrong:

• A (MFA): MFA is a security feature that adds an extra authentication layer, but it doesn't record or audit account activity.
• B (Lambda): Lambda is a serverless compute service for running code - it has nothing to do with auditing or compliance tracking.
• C (SNS): SNS is a messaging/notification service used to send alerts and messages between services or users, not for recording or auditing account activity.

Memory Tip: Think of CloudTrail as leaving a "trail of footprints" - every action taken in your AWS account leaves a footprint in the log. If you need to audit who walked through your AWS environment, follow the Cloud-Trail. The word "Trail" itself implies tracking and logging, which directly connects to auditing and compliance.

No community discussion yet for this question.