AIF-C01 Question 221
Select 2A financial services company needs to ensure compliance with industry regulations, which require maintaining a record of all API activity within their AWS accounts. Additionally, they need a service that helps them generate audit-ready reports for demonstrating compliance. Which AWS services should the company use to meet these requirements?
- A
AWS CloudTrail
- B
AWS Audit Manager
- C
Amazon Inspector
- D
AWS Trusted Advisor
- E
AWS Config
Show answer and explanation
Correct answers: A, B
Explanation
To meet the compliance requirements, the company should use AWS CloudTrail to maintain a record of all API activity and AWS Audit Manager to generate audit-ready reports for demonstrating compliance. AWS CloudTrail provides the necessary logging and traceability, while AWS Audit Manager automates compliance workflows and evidence collection. Other services like Amazon Inspector, AWS Trusted Advisor, and AWS Config are useful for security and governance but do not fully address the specific needs of this scenario.
- A. Correct.
AWS CloudTrail provides a record of all API activity and events in an AWS account, which is essential for meeting compliance requirements. It helps monitor and log activity, ensuring traceability.
- B. Correct.
AWS Audit Manager helps automate evidence collection and generates audit-ready reports to demonstrate compliance with industry regulations, making it suitable for this scenario.
- C. Incorrect.
Amazon Inspector is a security assessment service that helps improve the security of applications but is not used for tracking API activity or generating compliance reports.
- D. Incorrect.
AWS Trusted Advisor is a tool for optimizing AWS environments, offering recommendations for cost, performance, security, and fault tolerance. It does not directly assist with compliance reporting or API activity tracking.
- E. Incorrect.
AWS Config is a service that tracks resource configurations and compliance with custom or AWS-managed rules. While it helps with compliance, it does not provide API activity logs or generate audit-ready reports.