A company requires detailed information on actions taken within their cloud environment, such as user actions and accesses, for compliance auditing. To address this need, which service should primarily be used to capture and record these interactions?
Inspector
CloudTrail
CloudWatch
Security Hub
The correct answer is AWS CloudTrail. It's designed to capture and record all actions taken within an environment, like user accesses and API activities, which is crucial for auditing and compliance purposes. While Amazon CloudWatch provides monitoring and logging capabilities, it is primarily focused on performance and operational health, not recording API call history for auditing. AWS Security Hub focuses on security checks and consolidations of findings from various services but does not specifically track user actions or API calls. Amazon Inspector offers automated security assessment services for vulnerabilities and does not deal with logging and tracking of all interactions within an environment. Therefore, CloudTrail is the best fit for the requirement.
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
All IT & Cybersecurity Package plans include the following perks and exams .
Our pricing is simple. Full access to all certifications and exams in each package, for one price.
As many practice tests for as many topics as you want.
Use study mode non-stop, no limits.
Access to our AI assistant, Bash, trained to help you pass your exam.
Track your scores over time in study mode and report cards.
See how you improve over time, and where you need to focus.
Access our store with even bigger discounts than before.
Unlimited access to all performance questions and be prepared for the real thing.
All IT & Cybersecurity Package plans include unlimited access to the following study materials.
Create an account or sign in to access our study materials.