Q34 — AWS AIF-C01 Ch.3

Question 34 of 100 | ← Chapter 3

A company wants to log API calls made to Amazon Bedrock. For compliance purposes, the logs must include API call details, the identity of the calling user, and the timestamp. Which AWS service satisfies these requirements?

• A. Amazon Inspector
• B. Amazon CloudWatch
• C. AWS Trusted Advisor
• D. AWS CloudTrail ✓

Correct Answer: D. AWS CloudTrail

Explanation

AWS CloudTrail records API activity across an AWS account—including caller identity, timestamp, and the specific API call invoked. It fully satisfies the requirement to log Amazon Bedrock API calls, the invoking user, and the time of invocation. Its detailed audit logs support compliance auditing and security monitoring.