Examkin

Question

Difficulty: EasySecurity Logging, Monitoring, and Auditing

A retail company needs to track and audit all user activity and API calls within their AWS account for security compliance. They want to identify which specific user modified a security group rule or deleted an Amazon S3 bucket. Which AWS service should the company use to meet this requirement?

  1. AWS CloudTrailAnswer
  2. B
    Amazon CloudWatch
  3. C
    Amazon GuardDuty
  4. D
    Amazon Inspector

Answer

AWS CloudTrail
AWS CloudTrail is the correct choice because it records actions taken by a user, role, or AWS service. It provides a detailed history of API calls, including who made the call, when it was made, and from which IP address, which meets the company's compliance requirements.

Step-by-Step Solution

1
Identify the core requirement of the scenario: tracking and auditing all user actions and API calls (e.g., resource modification or deletion).
The requirement is for audit trails of API activity.
This helps narrow down the services that record activity versus those that monitor performance or detect threats.
2
Compare the capabilities of the options relative to logging API actions.
AWS CloudTrail is specifically designed for governance, compliance, and operational auditing of AWS account activity.
Selecting the service that logs AWS API calls ensures compliance and security visibility.

Key Concept

AWS CloudTrail provides governance, compliance, operational auditing, and risk auditing of your AWS account by logging user activity and API calls.
Estimated Time:45s
Rate this question

Topics

Security Logging, Monitoring, and Auditing

More questions from this topic