Answer – A,B and C
The AWS documentation mentions the following
AWS CloudTrail provides a history of AWS API calls for an account, including API calls made via the AWS Management Console, AWS SDKs, command line tools, and higher-level AWS services (such as AWS CloudFormation). This AWS API call history enables security analysis, resource change tracking, and compliance auditing. Customers can also deliver CloudTrail data to CloudWatch Logs to store, monitor, and process API calls for network-specific changes and to send appropriate notifications
AWS Config creates an AWS network resource inventory, including configuration history and configuration change notification
For more information on Networking monitoring in AWS , please refer to the below link:
https://aws.amazon.com/answers/networking/vpc-network-management-and-monitoring/