Your CTO has asked you to make sure that you know what all users of your AWS account are doing to change resources at all times. She wants a report of who is doing what over time, reported to her once per week, for as broad a resource type group as possible. How should you do this?
A) Create a global AWS CloudTrail Trail. Configure a script to aggregate the log data delivered to S3 once per week and deliver this to the CTO.
B) Use CloudWatch Events Rules with an SNS topic subscribed to all AWS API calls. Subscribe the CTO to an email type delivery on this SNS Topic.
C) Use AWS IAM credential reports to deliver a CSV of all uses of IAM User Tokens over time to the CTO.
D) Use AWS Config with an SNS subscription on a Lambda, and insert these changes over time into a DynamoDB table. Generate reports based on the contents of this table.

Question

Quizplus · Accepted Answer

AWS CloudTrail provides a record of actions taken by a user, role, or an AWS service in your account. By creating a global CloudTrail Trail, you can log all API calls made in your account and store them in an S3 bucket. You can then aggregate these logs and generate a report for the CTO.

Your CTO Has Asked You to Make Sure That You