A company’s security engineer has been asked to monitor and report all AWS account root user activities.
Which of the following would enable the security engineer to monitor and report all root user activities?
(Choose two.)
Configuring AWS Organizations to monitor root user API calls on the paying account
Creating an Amazon CloudWatch Events rule that will trigger when any API call from the root user is reported
Configuring Amazon Inspector to scan the AWS account for any root user activity
Configuring AWS Trusted Advisor to send an email to the security team when the root user logs in to the console
Using Amazon SNS to notify the target group
To the best of my knowledge, the answer is:
Creating an Amazon CloudWatch Events rule that will trigger when any API call from the root user is reported