AWS Certified Cloud Practitioner — Question 455

Which AWS service will help a company identify the user who deleted an Amazon EC2 instance yesterday?

Answer options

• A. Amazon CloudWatch
• B. AWS Trusted Advisor
• C. AWS CloudTrail
• D. Amazon Inspector

Correct answer: C

Explanation

AWS CloudTrail tracks and logs user activity and API calls across your AWS infrastructure, making it the correct service to audit who deleted the EC2 instance. Amazon CloudWatch focuses on performance monitoring and resource metrics rather than API auditing. AWS Trusted Advisor provides optimization recommendations, and Amazon Inspector is a vulnerability management service, neither of which track user actions.