AWS Certified Cloud Practitioner — Question 267

Which AWS service helps users audit API activity across their AWS account?

Answer options

• A. AWS CloudTrail
• B. Amazon Inspector
• C. AWS WAF
• D. AWS Config

Correct answer: A

Explanation

AWS CloudTrail is specifically designed to monitor, log, and retain account activity related to actions across your AWS infrastructure, providing a detailed history of API calls. Amazon Inspector focuses on automated security vulnerability assessments, AWS WAF protects web applications from common web exploits, and AWS Config tracks resource configuration changes rather than API access logs.