Which service records API calls for auditing?
Why D is the answer
AWS CloudTrail
CloudTrail logs API activity.
In detail
- CloudTrail records API calls.
- CloudTrail records API activity.
Use case
An illustrative scenario, not a real incident.
An auditor asks who called an API last month, and CloudTrail shows the identity and time.
See it in different ways
flowchart TD A["Who called what?"] --> B["AWS CloudTrail"] C["Are resources configured correctly?"] --> D["AWS Config"] E["Are there vulnerabilities?"] --> F["Amazon Inspector"] G["Where are compliance reports?"] --> H["AWS Artifact"]
mindmap
root((Governance))
Who did what
CloudTrail
How it is configured
AWS Config
Sensitive data
Macie
Compliance reports
Artifact
Access
IAM rolessequenceDiagram participant P0 as Caller participant P1 as AWS API participant P2 as CloudTrail participant P3 as Auditor P0->>P1: API call P1->>P2: Log activity P3-->>P2: Review
Key point: CloudTrail logs API calls.
Why the other options are wrong
- A. Amazon Translate
- Translate translates.
- B. Amazon Rekognition
- Rekognition analyzes images.
- C. Amazon Comprehend
- Comprehend analyzes text.