AWS Certified AI Practitioner · Free Practice Question Easy
Question 42
Which AWS service helps track user activity and provides logs of actions taken in an AWS account?
-
A
AWS Trusted Advisor
-
B
Amazon Inspector
-
C
AWS Config
-
D
AWS CloudTrail
Reveal correct answer
Correct answer: D
Explanation
Identifying the Appropriate AWS Service
AWS CloudTrail is the service specifically designed to monitor and log user activity within an AWS account. It records all API calls made to AWS services, providing detailed logs that are invaluable for auditing, compliance, and security purposes.
How AWS CloudTrail Meets the Requirements
Comprehensive Activity Logging:
Functionality: AWS CloudTrail captures all API calls made within an AWS account, including actions taken through the AWS Management Console, AWS SDKs, command-line tools, and other AWS services.
Detail Provided: Each log entry includes information such as the identity of the caller, the time of the API call, the source IP address, the request parameters, and the response elements returned by the AWS service.
Security and Compliance:
Audit Trails: By maintaining detailed logs of all actions, CloudTrail facilitates thorough audits, helping organizations ensure compliance with regulatory standards like GDPR, HIPAA, and PCI DSS.
Incident Response: In the event of a security incident, CloudTrail logs provide critical information for investigating unauthorized access or malicious activities.
Integration with Other AWS Services:
AWS CloudWatch: CloudTrail can be integrated with CloudWatch to set up alarms and notifications based on specific API activities or patterns, enabling real-time monitoring and alerts.
Amazon S3: Logs can be stored in Amazon S3 for long-term retention, analysis, and archival purposes.
Ease of Management:
Automated Logging: Once enabled, CloudTrail automatically records all API activities without the need for manual intervention.
Multi-Region Support: CloudTrail can be configured to log activities across multiple AWS regions, ensuring comprehensive coverage for global deployments.
Why Other AWS Services Are Less Suitable
AWS Trusted Advisor:
Primary Function: Trusted Advisor provides real-time guidance to help provision resources following AWS best practices. It offers recommendations on cost optimization, security, fault tolerance, performance, and service limits.
Misalignment with Requirements: While Trusted Advisor enhances the efficiency and security of AWS environments through recommendations, it does not focus on tracking or logging user activities and actions within the account.
AWS Config:
Primary Function: AWS Config monitors and records configurations of AWS resources, enabling users to assess, audit, and evaluate the configurations of their AWS resources.
Misalignment with Requirements: Although AWS Config provides detailed insights into resource configurations and changes over time, it does not specifically track user activities or log API calls made within the account.
Amazon Inspector:
Primary Function: Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS by analyzing network configurations and identifying vulnerabilities.
Misalignment with Requirements: Inspector focuses on identifying security vulnerabilities and improving application security posture rather than tracking user actions or logging API activities within the AWS account.
References:
A. AWS Trusted Advisor is a service that provides recommendations to help optimize AWS resources for cost efficiency, performance, security, and fault tolerance. It does not track user activity or provide logs of actions taken in an AWS account.
B. Amazon Inspector is a security assessment service that helps improve the security and compliance of applications deployed on AWS. It does not track user activity or provide logs of actions taken in an AWS account.
C. AWS Config is a service that provides detailed inventory and configuration history of AWS resources. While it helps track resource configurations and changes, it does not specifically track user activity or provide logs of actions taken in an AWS account.
D. AWS CloudTrail is the correct choice as it helps track user activity and provides logs of actions taken in an AWS account. It records API calls made on the account, including the identity of the caller, the time of the call, the source IP address, the request parameters, and the response elements returned by the AWS service.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
