Who changed an endpoint configuration last week?
Why B is the answer
Check AWS CloudTrail
CloudTrail records API calls.
In detail
- CloudTrail records who made each API call.
- It records API calls.
Use case
An illustrative scenario, not a real incident.
An endpoint changed overnight, and CloudTrail shows who made the update.
See it in different ways
flowchart TD A["Secure ML workload"] --> B["VPC and private endpoints"] A --> C["Least-privilege IAM roles"] A --> D["KMS encryption at rest"] A --> E["TLS in transit"]
mindmap
root((Security))
Access
IAM execution role
Network
VPC interface endpoint
Data
KMS customer managed keys
Audit
CloudTrailflowchart LR S0["Unexpected change"] --> S1["Search CloudTrail"] --> S2["Find the caller"]
Key point: CloudTrail answers who changed what.
Why the other options are wrong
- A. Check the training metrics
- Training metrics are unrelated.
- C. Check Amazon CloudWatch metrics
- Metrics show numbers, not who changed things.
- D. Check the model's weights
- Weights hold no history.