AWS Certified Cloud Practitioner (CLF-C02) — Question 353

What can a user accomplish using AWS CloudTrail?

Answer options

• A. Generate an IAM user credentials report.
• B. Record API calls made to AWS services.
• C. Assess the compliance of AWS resource configurations with policies and guidelines.
• D. Ensure that Amazon EC2 instances are patched with the latest security updates.

Correct answer: B

Explanation

AWS CloudTrail is designed to monitor and log account activity, specifically recording API calls made to AWS services for auditing and security analysis. In contrast, IAM is used to generate credential reports, AWS Config evaluates resource configuration compliance, and AWS Systems Manager Patch Manager handles EC2 instance patching.