To monitor API calls against our AWS account by different users and entities, we can use ____ to create a history of calls in bulk for later review, and use ____ for reacting to AWS API calls in real-time.

https://aws.amazon.com/whitepapers/security-at-scale-governance-in-aws/

A.
AWS Config; AWS Inspector

B.
AWS CloudTrail; AWS Config

C.
AWS CloudTrail; CloudWatch Events

D.
AWS Config; AWS Lambda

Explanation:
Explanation/Reference:
CloudTrail is a batch API call collection service, CloudWatch Events enables real-time monitoring of calls through the
Rules object interface.