A developer is trying to determine which IAM user is calling several AWS APIs from an application.
Which service would provide this information?
AWS Config
AWS CloudTrail
Amazon CloudWatch
Amazon VPC Flow Logs
Explanations:
AWS Config tracks changes to resources and their configurations, not specific API calls or user activity.
AWS CloudTrail records all API calls made in an AWS account, including details about the IAM user who initiated the call.
Amazon CloudWatch collects and monitors log data and metrics, but does not capture specific API call details or user information.
Amazon VPC Flow Logs capture network traffic data within a VPC, but do not record API calls or user activity.
As I see it, the answer is:
AWS CloudTrail