Match each AWS monitoring and logging service to its capability.
Drag a concept onto its matching description — or click a concept then click the description.
Collect metrics, logs, and set alarms
Record API activity for auditing
Assess, audit, and evaluate resource configurations
Trace and analyze distributed application requests
Automated security assessment of workloads
Trap 1: CloudTrail: Evaluate and track resource configuration changes
Incorrect — this describes AWS Config, which tracks configuration changes, not CloudTrail.
Trap 2: AWS Config: Record API activity for auditing and compliance
Incorrect — this describes AWS CloudTrail, which records API calls, not AWS Config.
- A
CloudWatch: Monitor and manage metrics, logs, and alarms
CloudWatch is used for monitoring operational performance and collecting metrics and logs.
- B
CloudTrail: Evaluate and track resource configuration changes
Why wrong: Incorrect — this describes AWS Config, which tracks configuration changes, not CloudTrail.
- C
AWS Config: Record API activity for auditing and compliance
Why wrong: Incorrect — this describes AWS CloudTrail, which records API calls, not AWS Config.
- D
Amazon GuardDuty: Threat detection using machine learning
Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity.