AWS Certified Cloud Practitioner — Question 973

A company needs to identify the last time that a specific user accessed the AWS Management Console.
Which AWS service will provide this information?

Answer options

• A. Amazon Cognito
• B. AWS CloudTrail
• C. Amazon Inspector
• D. Amazon GuardDuty

Correct answer: B

Explanation

AWS CloudTrail records API calls and user interactions, including ConsoleLogin events, making it the ideal service to audit when a user last accessed the AWS Management Console. Amazon Cognito manages user authentication for applications, Amazon Inspector scans for software vulnerabilities, and Amazon GuardDuty detects threats, so none of these services provide user console access logs.