ACloud Guru Certified Cloud Practitioner Practice Exam

Which AWS service can track actions that lead to the deletion of S3 buckets and termination of EC2 instances?

1. AWS CloudWatch

2. Trusted Advisor

3. AWS CloudTrail

4. AWS Inspector

The correct answer is: AWS CloudTrail

AWS CloudTrail is designed to provide a comprehensive view of user activity within an AWS account. It tracks API calls and actions taken by users and services across AWS resources, including those that affect the deletion of S3 buckets and the termination of EC2 instances. When an action such as deleting an S3 bucket or terminating an EC2 instance occurs, CloudTrail logs the details of that action, including the identity of the user who made the call, the time it occurred, and the parameters associated with the request. This logging capability is crucial for auditing and compliance purposes, as it allows organizations to track changes in their cloud infrastructure. It also assists in diagnosing security incidents and understanding the operational patterns of users. As a result, organizations can quickly respond to unauthorized or unintended changes in their environment, making CloudTrail an essential service for managing and securing AWS resources. Regarding the other options, services like AWS CloudWatch focus on monitoring the performance of AWS resources and applications, collecting metrics, and setting alarms. Trusted Advisor provides best practices and recommendations for optimizing your AWS environment but does not log actions. AWS Inspector is a security assessment service that helps improve the security and compliance of applications deployed on AWS, focusing on identifying vulnerabilities rather than tracking actions.