Which AWS service is used to track, record, and audit configuration changes made to AWS resources?

Explanations:

AWS Shield is primarily a security service that provides DDoS protection for applications running on AWS. It does not track or audit configuration changes.

AWS Config is specifically designed to track, record, and audit configuration changes made to AWS resources. It provides visibility into resource configurations and compliance with regulations.

AWS IAM (Identity and Access Management) is used for managing access to AWS services and resources securely. It does not track configuration changes.

Amazon Inspector is a security assessment service that helps improve the security and compliance of applications deployed on AWS. It focuses on vulnerabilities rather than configuration tracking.