A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources.
Which AWS tool or service can be used to meet these requirements?
Amazon CloudWatch
Amazon Inspector
AWS CloudTrail
AWS IAM
Explanations:
Amazon CloudWatch monitors and manages resources and applications but does not track API calls.
Amazon Inspector checks for security vulnerabilities but does not monitor API calls.
AWS CloudTrail records and tracks API calls across AWS resources, fulfilling the requirement.
AWS IAM manages access and permissions but does not track or log API calls.
In my experience, the answer is:
AWS CloudTrail
I would say the answer is:
AWS CloudTrail