Your company uses AWS to host its resources. They have the following requirements.
Record all API calls and Transitions.
Help in understanding what resources are there in the account.
Facility to allow auditing credentials and logins.
Which services would suffice the above requirements?
 

Answer options:

A.AWS Inspector, CloudTrail, IAM Credential Report
B.CloudTrail, IAM Credential Reports, AWS SNS
C.CloudTrail, AWS Config, IAM Credential Reports
D.AWS SQS, IAM Credential Reports, CloudTrail

Answer: C
Option A is incorrect because, as per the ask, it requires the service to record all the API calls. Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS but does not provide audit logs and reports.
Option B is incorrect because, as per the ask, we need an AWS service to provide resource inventory in our account. SNS is a fully managed messaging service for both system-to-system and app-to-person (A2P) communication but would not be able to provide resource details in our account.
Option C is CORRECT because it satisfies all the 3 tasks mentioned in the question. AWS CloudTrail provides all the API activities reports and logs, AWS Config provides details about resource inventory in our account, and IAM Credential Reports provides auditing credentials and logins.
Option D is incorrect because, as per the ask, we need an AWS service to provide resource inventory in our account. SQS is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications but would not be able to provide resource details in our account.
For more information on CloudTrail, Config, and IAM Credential Reports, kindly refer to the following URLs:
http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.htm
https://aws.amazon.com/config/
http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_getting-report.html