An auditor asks who called a model last month. Where do you look?
Why D is the answer
AWS CloudTrail
CloudTrail records API activity.
In detail
- CloudTrail records API calls, including who made them.
- It records API activity.
Use case
An illustrative scenario, not a real incident.
An auditor asks who invoked a model. CloudTrail shows the identity and the time.
See it in different ways
sequenceDiagram participant U as User participant I as IAM participant G as Guardrails participant M as Model participant L as CloudTrail U->>I: Is this caller allowed? I->>G: Filter the input G->>M: Safe prompt M-->>G: Output G-->>U: Filtered output I->>L: Records the call
flowchart LR S0["Audit request"] --> S1["Search CloudTrail"] --> S2["Identity and time"]
Key point: CloudTrail answers who called what.
Why the other options are wrong
- A. Amazon CloudWatch metrics
- Metrics show totals, not callers.
- B. The knowledge base chunking settings
- Chunking settings hold no calls.
- C. The prompt's version history only
- Prompt history shows prompt edits.