A company has managed many AWS resources. The IT audit department has requested to get a list of resources in the AWS account. How can this be achieved efficiently?

Answer options:

A.Create a powershell script using AWS CLI. Query and list all resources based on tags.
B.Create a bash shell script with AWS CLI. Get all resources in all AWS regions. Store the results in an S3 bucket.
C.Use CloudTrail to get the list of all resources.
D.Use AWS Config to get the list of all resources.

Answer: D
Options A and B are incorrect because these methods are very inefficient to get the list of AWS resources.
Option C is incorrect because AWS CloudTrail is used for logging API activities on your AWS account and does not provide an account inventory of all the resources and services used.
Option D is CORRECT because AWS Config provides a detailed list of resources defined in your AWS Account.
For more information on AWS Config, kindly refer to the below URL:
https://docs.aws.amazon.com/config/latest/developerguide/how-does-config-work.html