An engineering firm wants to capture all unusual activities performed on resources deployed in AWS Cloud. As an AWS Consultant, you have recommended enabling AWS CloudTrail Insight events for all trails. Management is looking for the details of the events which will be monitored using Insight events.
Which is the correct statement with regards to AWS CloudTrail Insight events?

Answer options:

A.CloudTrail Insights only monitors CloudTrail read management events.
B.CloudTrail Insights only monitors CloudTrail write management events.
C.CloudTrail Insights only monitors CloudTrail write data events.
D.CloudTrail Insights only monitors CloudTrail read data events.

Correct Answer: B
Insight Events for Trails can be used to detect unusual activities for write management events. These events are generated only when there are significant variations from normal usage patterns.
Option A is incorrect as AWS CloudTrail Insight events do not monitor read management events.
Options C & D are incorrect as AWS CloudTrail Insight events do not monitor data events.
For more information on logging insights events for AWS CloudTrail, refer to the following URL,
https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-insights-events-with-cloudtrail.html