Which service tracks how resources are configured over time?
Why B is the answer
AWS Config
AWS Config records and evaluates resource configurations.
In detail
- AWS Config tracks resource configuration over time.
- CloudTrail shows who called the API, and Config shows the resource state.
Use case
An illustrative scenario, not a real incident.
A setting changes and a bucket becomes exposed. AWS Config shows when the configuration changed.
See it in different ways
flowchart TD A["Who called what?"] --> B["AWS CloudTrail"] C["Are resources configured correctly?"] --> D["AWS Config"] E["Are there vulnerabilities?"] --> F["Amazon Inspector"] G["Where are compliance reports?"] --> H["AWS Artifact"]
mindmap
root((Governance))
Who did what
CloudTrail
How it is configured
AWS Config
Sensitive data
Macie
Compliance reports
Artifact
Access
IAM rolesflowchart TD
Q{"What do you need?"}
Q -->|"Who called the API"| A0["CloudTrail"]
Q -->|"How a resource was configured"| A1["AWS Config"]Key point: Config tracks resource configuration.
Why the other options are wrong
- A. Amazon Polly
- Polly creates speech.
- C. Amazon Transcribe
- Transcribe creates text from speech.
- D. Amazon Textract
- Textract reads documents.