AIF-C01 Practice Question: Security, Compliance, and Governance for AI Solutions
A financial services firm needs to ensure that all calls to Amazon Bedrock APIs are logged for audit purposes. Which AWS service should they enable to capture API calls?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS CloudTrail
AWS CloudTrail records API activity in AWS accounts, including Bedrock API calls, providing audit logs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
AWS CloudTrail
Why this is correct
CloudTrail records API activity as management and data events, capturing every Bedrock API call with caller identity, timestamp and source IP. Enabling a trail delivers the audit logging the firm requires, satisfying the compliance constraint without altering application code.
- ✗
Amazon S3 server access logs
Why it's wrong here
S3 server access logs record requests made to S3 buckets only, not Bedrock API invocations. They suit auditing object-level access to storage. Capturing Bedrock API calls for audit requires AWS CloudTrail, which logs API activity across services.
- ✗
Amazon CloudWatch Logs
Why it's wrong here
CloudWatch Logs stores application and resource logs, but Bedrock API call auditing requires the service that records API activity per principal. CloudWatch suits metric and log monitoring. The audit requirement is met by AWS CloudTrail, which captures Bedrock API calls as management events.
- ✗
AWS Config
Why it's wrong here
AWS Config records resource configuration changes and evaluates compliance rules; it does not log individual API calls. It suits configuration drift tracking. Auditing Bedrock API invocations requires AWS CloudTrail, which captures the API activity events themselves.
Go deeper
Related to this question
About these practice questions
Courseiva writes every AIF-C01 question from scratch — 862 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AIF-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AIF-C01 exam.