Which of the following statements best describes the AWS service CloudTrail?

You are very concerned about security on your network because you have multiple programmers testing APIs and SDKs and you have no idea what is happening. You think CloudTrail may help but arenot sure what it does.

Which of the following statements best describes the AWS service CloudTrail?
A .  With AWS CloudTrail you can get a history of AWS API calls and related events for your account.
B .  With AWS CloudTrail you can get a history of IAM users for your account.
C .  With AWS CloudTrail you can get a history of S3 logfiles for your account.
D .  With AWS CloudTrail you can get a history of CloudFormation JSON scripts used for your account.

View Answer

Answer: A

Explanation:

With AWS CloudTrail, you can get a history of AWS API calls for your account, including API calls made via the AWS Management Console, the AWS SDKs, the command line tools, and higher-level AWS services. You can also identify which users and accounts called AWS APIs for services that support CloudTrail, the source IP address the calls were made from, and when the calls occurred.

You can identify which users and accounts called AWS for services that support CloudTrail, the source IP address the calls were made from, and when the calls occurred. You can integrate CloudTrail into applications using the API, automate trail creation for your organization, check the status of your trails, and control how administrators turn CloudTrail logging on and off.

Reference: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/what_is_cloud_trail_top_level.html