AWS Certified Cloud Practitioner — Question 545

What can a user accomplish using AWS CloudTrail?

Answer options

• A. Generate an IAM user credentials report.
• B. Record API calls made to AWS services.
• C. Assess the compliance of AWS resource configurations with policies and guidelines.
• D. Ensure that Amazon EC2 instances are patched with the latest security updates.

Correct answer: B

Explanation

AWS CloudTrail is specifically designed to log, continuously monitor, and retain account activity related to actions across your AWS infrastructure by recording API calls. In contrast, generating credentials reports is a feature of AWS IAM, while AWS Config assesses resource configuration compliance. Amazon EC2 instance patching is typically managed via AWS Systems Manager.