To monitor API calls against our AWS account by different users and entities, we can use ____ to create a history of calls
in bulk for later review, and use ____ for reacting to AWS API calls in real-time.
A.
AWS Config; AWS Inspector
B.
AWS CloudTrail; AWS Config
C.
AWS CloudTrail; CloudWatch Events
D.
AWS Config; AWS Lambda
Explanation:
CloudTrail is a batch API call collection service, CloudWatch Events enables real-time monitoring of calls through the
Rules object interface.
https://aws.amazon.com/whitepapers/security-at-scale-governance-in-aws/
C
AWS Cloud Trail monitors and record API calls and AWS Cloud watch present them in readable manners to examine them.
So C is the best option here.
3
0
C
0
0