You work as a Systems Administrator for a company. An external audit is going to be conducted on several resources hosted on AWS. As a part of the audit, you must give the recorded API-related activities carried out on the existing AWS resources. Which of the following service would be able to fulfill this requirement?

Answer options:

A.AWS CloudWatch logs
B.AWS Trusted Advisor
C.AWS Config
D.AWS CloudTrail

Correct Answer: D
The AWS Documentation mentions the following.
AWS CloudTrail is an AWS service that helps you enable governance, compliance, and operational and risk auditing of your AWS account. Actions taken by a user, role, or an AWS service are recorded as events in CloudTrail. Events include actions taken in the AWS Management Console, AWS Command Line Interface, and AWS SDKs and APIs.
Option A is incorrect because this service will not give you all the Activities recorded for each AWS resource.
Option B is incorrect because this can only give you recommendations.
Option C is incorrect because this is a configuration service.
For more information on AWS Cloudtrail, please refer to the below URL-
https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html