AWS Certified Cloud Practitioner (CLF-C02) — Question 582

A company needs to identify who accessed an AWS service and what action was performed for a given time period.

Which AWS service should the company use to meet this requirement?

Answer options

• A. Amazon CloudWatch
• B. AWS CloudTrail
• C. AWS Security Hub
• D. Amazon Inspector

Correct answer: B

Explanation

AWS CloudTrail is designed to record and track API calls and user activity across an AWS account, providing a detailed history of who performed what action and when. Amazon CloudWatch focuses on performance monitoring and log collection, AWS Security Hub aggregates security alerts, and Amazon Inspector automates vulnerability assessments, making AWS CloudTrail the correct service for auditing access history.