Which service should you use to track changes made by any AWS service, resource, or API?

• A. AWS CloudTrail
• B. Amazon Translate
• C. Amazon Rekognition
• D. Amazon Personalize

Answer: (A)

CloudTrail is the service built to capture and record all API calls made in your AWS account, across services and regions. It logs who made the call, what action was taken, when it happened, the source IP, and the request details, storing the events in an S3 bucket you own or in other integrated destinations. This makes it possible to track changes to resources, investigate security incidents, and meet compliance by reviewing activity across every AWS service, resource, and API. You can enable trails that cover multiple regions and accounts, and you can route logs to CloudWatch Logs or SIEM tools for real-time monitoring. The other services shown aren’t designed for auditing changes across AWS infrastructure: translation handles text translation, Rekognition analyzes images and videos, and Personalize builds recommendations.