AWS Certified Cloud Practitioner

AWS CloudTrail is the correct answer because it is an AWS service that enables governance, compliance, operational auditing, and risk auditing of AWS accounts. It provides event history of AWS account activity including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. This makes it essential for governance monitoring and risk auditing purposes.

Key features of AWS CloudTrail:

• Logs API calls and account activity

• Provides event history for governance and compliance

• Enables security analysis and troubleshooting

• Helps with operational auditing

Other options explained:

• VPC Flow Logs: Captures information about IP traffic going to and from network interfaces in VPCs, but doesn't provide governance monitoring or risk auditing

• Amazon CloudWatch: Monitors AWS resources and applications, but focuses on metrics and logs rather than governance auditing

• AWS Trusted Advisor: Provides recommendations for cost optimization, security, fault tolerance, and performance improvement, but doesn't specifically handle governance monitoring or risk auditing