AWS Certified Cloud Practitioner — Question 360

Which AWS service is used to track, record, and audit configuration changes made to AWS resources?

Answer options

• A. AWS Shield
• B. AWS Config
• C. AWS IAM
• D. Amazon Inspector

Correct answer: B

Explanation

AWS Config is the dedicated service for tracking, recording, and auditing resource configuration changes to ensure compliance and security. AWS Shield is utilized for DDoS protection, AWS IAM handles access management, and Amazon Inspector performs security vulnerability assessments, meaning none of them are designed for configuration history tracking.