An online education platform needs to implement a security and monitoring strategy for its AWS environment. The security team must meet two primary requirements: first, they must keep a complete history of all API calls made within their AWS account for auditing purposes; second, they need to continuously monitor their AWS accounts and workloads for malicious activity and unauthorized behavior, such as potential cryptocurrency mining. Which AWS services should the company implement to meet these requirements? (Select TWO.)
- AWS CloudTrailAnswer
- Amazon GuardDutyAnswer
- CAmazon CloudWatch
- DAmazon Inspector
Answer
The company should use AWS CloudTrail to record the history of API calls, and Amazon GuardDuty to monitor the account and workloads for malicious behavior like cryptocurrency mining.
AWS CloudTrail is designed to record API calls and user activity for security auditing. Amazon GuardDuty is a threat detection service that continuously monitors accounts and workloads for malicious activity, such as unauthorized access or cryptocurrency mining.
Step-by-Step Solution
Key Concept
Distinguishing between audit trails, active threat detection, and operational monitoring in AWS.