An IT firm uses AWS Resource Access Manager to share AWS Network Firewall with multiple accounts in an organization. The Security Team is looking for recent activities using AWS Resource Access Manager API calls to modify firewall policies in AWS Network Firewall.
Which component can be viewed to get the required details without any additional configuration?

Answer options:

A.View Log files delivered by CloudTrail in Amazon EC2 instance.
B.View Log files delivered by CloudTrail in Amazon S3 bucket.
C.View Event History in CloudTrail Console.
D.View Trails in CloudTrail console.

Correct Answer: C
AWS Resource Access Manager is integrated with AWS CloudTrail. All API calls made to AWS Resource Access Manager are captured by AWS CloudTrail. When there is any activity with AWS Resource Access Manager, it`s recorded in AWS CloudTrail in Event History. All recent activities can be viewed from Event History in CloudTrail Console.
Option A is incorrect as Log files are delivered to the Amazon S3 bucket, not to the Amazon EC2 instance.
Option B is incorrect as Log files are delivered to the Amazon S3 bucket only when a trail is configured. This will require a trail to be configured.
Option D is incorrect as when trail is configured, log files are delivered to Amazon S3 bucket and cannot be viewed in CloudTrail Console.
For more information on AWS RAM, refer to the following URL,
https://docs.aws.amazon.com/ram/latest/userguide/logging-using-cloudtrail.html