AWS CloudTrail Purpose and Functionality
What can a user accomplish using AWS CloudTrail?
Community Votes
100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The question tests knowledge of AWS CloudTrail's primary function: logging API activity, distinguishing it from configuration assessment or credential reporting tools.
This page explains that AWS CloudTrail is designed to record API calls made to AWS services for auditing and governance purposes. It clarifies why recording API activity is the correct answer over other security or compliance options.
Learners often confuse CloudTrail with AWS Config (which assesses resource configurations) or IAM Credential Reports (which list user credentials), leading them to choose incorrect options like A or C.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. Its core function is to log, continuously monitor, and retain account activity related to actions across your AWS infrastructure. Specifically, it records API calls made to AWS services, including who made the call, the source IP address, when it occurred, and what parameters were used. This makes option B the definitive answer.Why the Other Options Are Wrong
Option A describes the IAM Credential Report, which lists all users in your account and the status of their various credentials, not API activity. Option C refers to AWS Config, which assesses the compliance of AWS resource configurations against desired policies. Option D relates to AWS Systems Manager Patch Manager or similar automated patching solutions, not an auditing tool. None of these services primarily focus on recording the history of API requests.Community Comment Notes
The community consensus strongly supports option B. As noted by user Aghajee, CloudTrail is essential for "governance, compliance, operational auditing, and risk auditing" because it tracks who did what. User sdale simply affirmed that B is correct without doubt, reflecting the straightforward nature of this foundational concept. Another user, ShaiTay, also confirmed B as the right choice.Exam Strategy
When asked about CloudTrail, immediately think 'API Calls' and 'Auditing'. If the question mentions tracking changes to resource configurations, think AWS Config. If it mentions user credentials status, think IAM Credential Report.
Frequently Asked Questions
How does CloudTrail differ from AWS Config?
CloudTrail logs API calls and user activity for auditing. AWS Config tracks configuration changes and compliance of resources over time.
Can CloudTrail generate a report of IAM user credentials?
No. To get a report of IAM user credentials and their status, you must use the IAM Credential Report feature within IAM.
Related Analysis
Practice All CLF-C02 Questions
Access 120 questions with complete answers and detailed explanations.
View Full CLF-C02 Practice Test →