Question

A CloudOps engineer must provide auditors with evidence that all API activity in an AWS account is being recorded, that resource configurations are continuously evaluated against a security baseline, and that a prioritized, aggregated view of findings across multiple compliance standards (such as CIS and PCI DSS) is available. Which combination of services, used for its intended purpose, satisfies these requirements?

Accepted Answer

Use CloudTrail for API activity logging, AWS Config for continuous configuration evaluation, and Security Hub to aggregate and prioritize findings against multiple standards.

Answer

Use Amazon CloudWatch Logs for API activity logging, AWS Config for configuration snapshots, and GuardDuty to prioritize compliance standard findings.

Answer

Use CloudTrail for both API activity logging and continuous configuration evaluation, and IAM Access Analyzer to aggregate findings against compliance standards.

Answer

Use AWS Config for API activity logging, CloudTrail for configuration evaluation, and Amazon Inspector to aggregate findings against multiple standards.