Exam AWS Certified Cloud Practitioner CLF-C02 topic 1 question 41 discussion

A. AWS CloudTrail: Enables customers to audit API calls in their AWS accounts by capturing and logging those calls. It provides visibility into user and resource activity and can be used for security analysis, compliance checking, and troubleshooting. B. AWS Trusted Advisor: Provides best practices and recommendations for optimizing AWS resources. While it can offer guidance on security-related matters, it doesn't specifically focus on auditing API calls. C. Amazon Inspector: Assesses the security vulnerabilities of applications deployed on AWS. It is more focused on security assessments and vulnerability detection rather than auditing API calls. D. AWS X-Ray: Helps trace requests as they travel through applications, providing insights into application performance. It is not primarily designed for auditing API calls but for understanding and debugging distributed applications.

AWS CloudTrail is a service that records all API calls made on your AWS account. It provides a detailed history of events, including who made the call, what actions were performed, and from which IP address the call originated. This audit trail is valuable for security, compliance, troubleshooting, and monitoring purposes, and it helps you maintain visibility into how your AWS resources are being used.

AWS CloudTrail enables customers to monitor and log API calls made within their AWS accounts. It provides detailed records of actions taken by users, services, and applications, allowing you to audit activities such as who made a request, which service was called, and what parameters were used. This is essential for compliance and security auditing.

A. AWS CloudTrail

A is ok

AWS CloudTrail: Enables customers to audit API calls in their AWS accounts by capturing and logging those calls.

AWS CloudTrail is a service that records all API calls made on your AWS account. It provides a detailed history of events, including who made the call, what actions were performed, and from which IP address the call originated. This audit trail is valuable for security, compliance, troubleshooting, and monitoring purposes, and it helps you maintain visibility into how your AWS resources are being used.

https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-concepts.html

A is correct "CloudTrail: Track API calls made by users within account."

Answer A is Correct. Key: "audit API calls"

Cloud trail is used to track API calls to AWS account.

CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. It records and logs all API calls made within your account, including who made them, when they were made, and which resources were affected.