Your company is making use of Kinesis streams. There are several applications that are built on EC2 Instances with access to Kinesis streams via IAM Roles. As per the security audit, it is required to track the calls made to create streams within the Kinesis service. Which method can be used to achieve the requirement?

Answer options:

A.Use the Kinesis API tracker to track the requests made to the streams.
B.Create a CloudTrail trail to track all management activities.
C.Create a CloudTrail trail and include the Amazon Kinesis Data Streams service.
D.There is no AWS service or tool that can trace the Amazon Kinesis Data Streams activities.

Answer – C
The AWS Documentation mentions the following.
Amazon Kinesis Data Streams is integrated with AWS CloudTrail, which captures API calls made by or on behalf of Kinesis Data Streams and delivers the log files to the Amazon S3 bucket that you specify. The API calls can be made indirectly by using the Kinesis Data Streams console or directly by using the Kinesis Data Streams API. Using the information collected by CloudTrail, you can determine what request was made to Kinesis Data Streams, the source IP address from which the request was made, who made the request, when it was made, and so on.
Option A is incorrect because there is no API tracker with AWS Kinesis.
Option B is incorrect because there is no need to include all management activities in the trail.
Option C is CORRECT because CloudTrail supports the Amazon Kinesis Data Streams service.
For more information on logging with CloudTrail, please refer to the below URL
https://docs.aws.amazon.com/streams/latest/dev/logging-using-cloudtrail.html