AWS Certified Cloud Practitioner (CLF-C02) — Question 408

A company needs to perform an audit of recent AWS account activity. The audit will investigate who initiated an event and what actions were performed.

Which AWS service should the company use to meet these requirements?

Answer options

• A. AWS Config
• B. Amazon Rekognition
• C. AWS CloudTrail
• D. Amazon Simple Notification Service (Amazon SNS)

Correct answer: C

Explanation

AWS CloudTrail is the correct service because it records AWS API calls and user activity, allowing organizations to track who made a request, when it occurred, and what actions were executed. AWS Config is used to track resource configuration history rather than event history, while Amazon Rekognition is for image/video analysis and Amazon SNS is a messaging service.