Your CTO has asked you to make sure that you know how all your AWS account users change the AWS resources. She wants a report of who is doing what over time, reported to her once per week. Which of the following options can achieve this in the easiest way?

Answer options:

A.Create a global AWS CloudTrail Trail. Configure a bash script to aggregate the log data delivered to S3 once per week and deliver this to the CTO.
B.Use AWS CloudWatch Logs with an SNS topic subscribed to all AWS API calls. Subscribe the CTO to an email type delivery on this SNS Topic.
C.Use AWS IAM credential reports to deliver a CSV of all uses of IAM User Tokens over time to the CTO.
D.Use AWS Config with an SNS subscription on a Lambda, and insert these changes over time into a DynamoDB table. Generate reports based on the contents of this table.

Answer – A
AWS CloudTrail is an AWS service that helps you enable governance, compliance, and operational and risk auditing of your AWS account. Actions taken by a user, role, or an AWS service are recorded as events in CloudTrail. Events include actions taken in the AWS Management Console, AWS Command Line Interface, and AWS SDKs and APIs.
Visibility into your AWS account activity is a key aspect of security and operational best practices. You can use CloudTrail to view, search, download, archive, analyze, and respond to account activity across your AWS infrastructure. You can identify who or what took which action, what resources were acted upon, when the event occurred, and other details to help you analyze and respond to activity in your AWS account.
Option B is incorrect because the AWS API activities are not logged in AWS CloudWatch Logs.
Option C is incorrect because the IAM credential reports do not contain the details of API calls to the AWS resources.
Option D is incorrect because as the changes are saved in a DynamoDB table, you have to give extra effort to generate the reports based on the data.
Option A is more straightforward.
For more information on CloudTrail, please visit the below URL:
http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html