CloudTrail Quiz
Your company has a set of resources hosted on the AWS Cloud. As a part of the new governing model, there is a requirement that all activity on AWS resources should be monitored. What is the most efficient way to have this implemented?
A. Use VPC Flow Logs to monitor all activity in your VPC.
B. Use AWS Trusted Advisor to monitor all of your AWS resources.
C. Use AWS Inspector to inspect all of the resources in your account.
D. Use AWS CloudTrail to monitor all API activity.
D. Use AWS CloudTrail to monitor all API activity.
AWS Documentation mentions the following on AWS CloudTrail:
AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure. CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. This event history simplifies security analysis, resource change tracking, and troubleshooting.Visibility into your AWS account activity is a key aspect of security and operational best practices. You can use CloudTrail to view, search, download, archive, analyze, and respond to account activity across your AWS infrastructure. You can identify who or what took which action, what resources were acted upon, when the event occurred, and other details to help you analyze and respond to activity in your AWS account.You can integrate CloudTrail into applications using the API, automate trail creation for your organization, check the status of trails you create, and control how users view CloudTrail events.More information is available at the below URLs:https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.htmlhttps://aws.amazon.com/cloudtrail/
