An audit is going to be conducted for your company’s AWS account. Which of the following steps will ensure that the auditor has the right access to the logs of your AWS account

Answer options:

A.Enable S3 and ELB logs. Send the logs as a zip file to the IT Auditor.
B.Ensure that Cloudtrail is enabled. Create a role for read only access to Cloudtrail. Create a user for the IT Auditor and the user should assume this role.
C.Ensure that Cloudtrail is enabled. Create a user for the IT Auditor and ensure that full control is given to the user for Cloudtrail.
D.Enable Cloudwatch logs. Create a user for the IT Auditor and ensure that full control is given to the user for the Cloudwatch logs.

Answer – B
The AWS Documentation clearly mentions the below
AWS CloudTrail is an AWS service that helps you enable governance, compliance, and operational and risk auditing of your AWS account. Actions taken by a user, role, or an AWS service are recorded as events in CloudTrail. Events include actions taken in the AWS Management Console, AWS Command Line Interface, and AWS SDKs and APIs.
For more information on Cloudtrail, please visit the below URL:
http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html