You work in a start-up company as an AWS solutions architect. You create a new AWS Organization that includes a large amount of AWS accounts. You want to use a tool to trigger a notification whenever the administrator performs an action in the Organization. Which of the following AWS services would you use?

Answer options:

A.AWS CloudWatch Events.
B.AWS Config Resources.
C.AWS CloudTrail.
D.AWS CloudWatch Logs.

Correct Answer – A
Option A is CORRECT because CloudWatch Events can raise events for actions in the AWS Organization. You can register an SNS topic to trigger a notification in a CloudWatch Event rule.
Option B is incorrect because AWS Config Resources do not log events for AWS Organizations.
Option C is incorrect because AWS CloudTrail is used to create to trail to monitor the AWS API calls.
Option D is incorrect because CloudWatch Logs cannot provide a real-time notification like CloudWatch Events when an administrator-specified action in the Organization occurs.
Reference:
https://docs.aws.amazon.com/organizations/latest/userguide/orgs_security_incident-response.html.
https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tutorials_cwe.html.
https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html.