AWS Certified Solutions Architect - Associate
Get started today
Ultimate access to all questions.
Deep dive into the quiz with AI chat providers.
We prepare a focused prompt with your quiz and certificate details so each AI can offer a more tailored, in-depth explanation.
A company hosts its multi-tier applications on AWS. For compliance, governance, auditing, and security, the company must track configuration changes on its AWS resources and record a history of API calls made to these resources. What should a solutions architect do to meet these requirements?
Other
Community
UAnonymous
A
Use AWS CloudTrail to track configuration changes and AWS Config to record API calls.
B
Use AWS Config to track configuration changes and AWS CloudTrail to record API calls.
C
Use AWS Config to track configuration changes and Amazon CloudWatch to record API calls.
D
Use AWS CloudTrail to track configuration changes and Amazon CloudWatch to record API calls.
Explanation:
Explanation
Correct Answer: B
AWS Config is designed to track configuration changes on AWS resources. It provides a detailed inventory of AWS resources and their configuration history, allowing you to assess compliance with internal policies and track how resources change over time.
AWS CloudTrail is designed to record API calls made to AWS services. It logs all API activity, providing a history of who did what, when, and from where, which is essential for security analysis, resource change tracking, and compliance auditing.
Why the other options are incorrect:
- Option A: Reverses the correct services - CloudTrail is for API calls, not configuration changes, and Config is for configuration changes, not API calls.
- Option C: Uses CloudWatch instead of CloudTrail for API calls. While CloudWatch can monitor metrics and logs, it doesn't specifically record API call history like CloudTrail does.
- Option D: Uses CloudTrail for configuration changes (incorrect) and CloudWatch for API calls (incorrect). CloudTrail records API calls, not configuration changes, and CloudWatch doesn't provide comprehensive API call history.
Key Service Functions:
- AWS Config: Configuration management, compliance auditing, resource inventory
- AWS CloudTrail: API activity logging, security analysis, compliance auditing
- Amazon CloudWatch: Monitoring, metrics collection, log aggregation
This combination provides comprehensive visibility for compliance, governance, auditing, and security requirements.
Comments
Loading comments...