Which AWS service is used to track, record, and audit configuration changes made to AWS resources?
AWS Shield
AWS Config
AWS IAM
Amazon Inspector
Explanations:
AWS Shield is a service designed for DDoS protection and does not track or audit configuration changes.
AWS Config is specifically designed to track, record, and audit configuration changes to AWS resources, providing a detailed history and compliance checks.
AWS IAM (Identity and Access Management) is focused on managing user access and permissions, not on tracking configuration changes of AWS resources.
Amazon Inspector is a security assessment service for applications and does not handle tracking or auditing configuration changes.
Based on what I know, the answer is:
AWS Config
If I had to guess, I’d say the answer is:
AWS Config