Home › AWS Cloud Practitioner › cloudcomputing › securitycompliance › Which AWS service logs all API calls made agains…
Which AWS service logs all API calls made against the AWS account, so administrators can audit who did what and when?
AAmazon CloudWatch Logs (which only collects application log files)
BAWS CloudTrail
CAWS Cost Explorer (which only shows spend over time)
DAWS Trusted Advisor (which only flags best-practice gaps)
Answer & Solution
Correct answer: B. AWS CloudTrail
CloudTrail records every API call to AWS (console, CLI, SDK, internal services) into immutable log files. CloudWatch Logs ingests app/server logs, Trusted Advisor inspects configurations, and Cost Explorer is for billing — none of those answers "who called the AWS API."
Related questions
AWS IAM Identity Center (formerly AWS SSO) primarily lets you:Which combination correctly describes encryption in transit versus encryption at rest?A team wants to block common web exploits like SQL injection and cross-site scripting at tAn organization wants to detect threats like unusual API calls, compromised EC2 instances,For Amazon RDS, which of the following best describes the shared responsibility split?What is the difference between an IAM user and an IAM role?The principle of least privilege, as applied via IAM, recommends that you:Which task can ONLY be performed by the AWS account root user, and not by any IAM user eve