
Ultimate access to all questions.
Which AWS service tracks API calls and user activity?
Explanation:
AWS CloudTrail is the correct service for tracking API calls and user activity in AWS. Here's why:
AWS CloudTrail: Records API calls and user activity across your AWS infrastructure, providing a history of AWS API calls for your account. It logs, continuously monitors, and retains account activity related to actions across your AWS infrastructure.
AWS Organizations: A service for policy-based management of multiple AWS accounts, not for tracking API calls.
AWS Config: Monitors and records configuration changes to AWS resources, but doesn't specifically track API calls and user activity.
Amazon CloudWatch: A monitoring service for AWS resources and applications, focused on metrics, logs, and events rather than API call tracking.
CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services, making it essential for security analysis, resource change tracking, and compliance auditing.