CLF-C02 · Question #224
A company needs to perform an audit of recent AWS account activity. The audit will investigate who initiated an event and what actions were performed. Which AWS service should the company use to meet
The correct answer is C. AWS CloudTrail. AWS CloudTrail should be used to audit AWS account activity, specifically to track who initiated events and what actions were performed.
Question
A company needs to perform an audit of recent AWS account activity. The audit will investigate who initiated an event and what actions were performed. Which AWS service should the company use to meet these requirements?
Options
- AAWS Config
- BAmazon Rekognition
- CAWS CloudTrail
- DAmazon Simple Notification Service (Amazon SNS)
How the community answered
(45 responses)- A2% (1)
- B7% (3)
- C89% (40)
- D2% (1)
Why each option
AWS CloudTrail should be used to audit AWS account activity, specifically to track who initiated events and what actions were performed.
AWS Config tracks resource configuration changes and compliance but does not log specific user or service API call events.
Amazon Rekognition is a machine learning service for image and video analysis and is unrelated to auditing AWS account activity.
AWS CloudTrail records API calls and related events made by users, roles, or AWS services in your AWS account, providing an audit trail that shows who performed what actions, when, and from where.
Amazon Simple Notification Service (Amazon SNS) is a messaging service used for sending notifications, not for auditing account activity.
Concept tested: Auditing AWS account activity
Source: https://aws.amazon.com/cloudtrail/
Community Discussion
No community discussion yet for this question.