Which AWS service is used to track, record, and audit configuration changes made to AWS resources?

Explanations:

AWS Shield is a service designed for DDoS protection and does not track or audit configuration changes.

AWS Config is specifically designed to track, record, and audit configuration changes to AWS resources, providing a detailed history and compliance checks.

AWS IAM (Identity and Access Management) is focused on managing user access and permissions, not on tracking configuration changes of AWS resources.

Amazon Inspector is a security assessment service for applications and does not handle tracking or auditing configuration changes.