AWS Certified Cloud Practitioner (CLF-C02) — Question 80

A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources.
Which AWS tool or service can be used to meet these requirements?

Answer options

• A. Amazon CloudWatch
• B. Amazon Inspector
• C. AWS CloudTrail
• D. AWS IAM

Correct answer: C

Explanation

AWS CloudTrail is specifically designed to log and monitor API calls made on AWS resources, making it the correct choice. Amazon CloudWatch focuses on monitoring AWS resources and applications, but does not provide detailed API call logging. Amazon Inspector assesses security vulnerabilities and does not track API calls, while AWS IAM is used for managing access permissions rather than monitoring activities.