You are working as a SysOps admin for a large pharma company. They are using infrastructure with a large number of EC2 instances. You are concerned about some critical EC2 servers for which any unplanned changes will be catastrophic. You want to be notified by an operations team whenever there is a change to these instances. Notification emails should consist of user details performing those changes & changes made. Which of the following services will you use for this purpose?

Answer options:

A.AWS Config & Trusted Advisor.
B.AWS CloudWatch & CloudTrail.
C.AWS Config & CloudTrail.
D.AWS CloudWatch & Config.

Correct Answer: C
AWS Config is a fully managed service that provides you with an AWS resource inventory, configuration history, and configuration change notifications to enable security and governance.
AWS CloudTrail records user API activity on your account and allows you to access information about this activity. You get full details about API actions, such as the caller`s identity, the time of the API call, the request parameters, and the response elements returned by the AWS service.
Option A is incorrect – Trusted Advisor is an online tool to reduce cost, increase performance, and improve security by optimizing your AWS environment. Using AWS Config, you can determine changes made to EC2, but AWS Trust Advisor will not gather user details performing changes. AWS CloudTrail will gather these details.
Option B is incorrect – Using Amazon CloudWatch, you gain system-wide visibility into resource utilization, application performance, and operational health. To determine configuration changes, you need to use AWS Config instead of AWS CloudWatch.
Option D is incorrect – Using Amazon CloudWatch, you gain system-wide visibility into resource utilization, application performance, and operational health. AWS CloudWatch can not gather user details performing changes, but AWS CloudTrail can gather these details.
For more information on using both AWS Config & CloudTrail, check the following link-
https://aws.amazon.com/config/faq/