Examkin

Question

Difficulty: MediumSecurity Logging, Monitoring, and Auditing

A healthcare provider must ensure that all administrative actions performed in their AWS Cloud environment are recorded for regulatory compliance. They need to track when a user logs in, which resources were modified, and the source IP address of the request. Which AWS service is designed to record and log these API transactions?

  1. A
    Amazon GuardDuty
  2. AWS CloudTrailAnswer
  3. C
    Amazon CloudWatch
  4. D
    AWS Trusted Advisor

Answer

AWS CloudTrail
AWS CloudTrail is designed specifically to track, log, and audit user activity and API calls across the AWS infrastructure. It provides detailed records of who made the request, when, and from what IP address, which meets compliance requirements.

Step-by-Step Solution

1
Identify the key requirement in the scenario.
The healthcare provider needs to record all administrative actions, track user logins, resource modifications, and log the source IP addresses of the requests for regulatory compliance.
This establishes the core need for API logging and activity auditing.
2
Evaluate the capabilities of the AWS services listed in the options.
AWS CloudTrail records and logs AWS API transactions and user actions. Amazon CloudWatch focuses on operational metrics and system logs. Amazon GuardDuty focuses on threat detection. AWS Trusted Advisor provides optimization recommendations.
Matching the requirements to the correct service's primary function ensures the correct selection.
3
Verify which service provides the necessary activity history.
AWS CloudTrail is the specific service designed to log API transactions and user activity for auditing and compliance.
This confirms the correct option based on AWS services documentation.

Key Concept

AWS CloudTrail is the primary service used to log, monitor, and retain account activity related to actions across your AWS infrastructure, enabling operational auditing and compliance verification.
Rate this question

Topics

Security Logging, Monitoring, and Auditing

More questions from this topic