
Ultimate access to all questions.
A company has identified a billing anomaly in their AWS account and has discovered that an employee who left the company 30 days ago still has access. The company has not been monitoring account activity. A security consultant is tasked with quickly determining which resources have been deployed or reconfigured by this former employee. Which AWS service or feature should the consultant use to efficiently identify these changes?
A
In AWS Cost Explorer, filter chart data to display results from the past 30 days. Export the results to a data table. Group the data table by resource.
B
Use AWS Cost Anomaly Detection to create a cost monitor. Access the detection history. Set the time frame to Last 30 days. In the search area, choose the service category.
C
In AWS CloudTrail, filter the event history to display results from the past 30 days. Create an Amazon Athena table that contains the data. Partition the table by event source.
D
Use AWS Audit Manager to create an assessment for the past 30 days. Apply a usage-based framework to the assessment. Configure the assessment to assess by resource.