Your company has stored all application secrets in SSM Parameter Store. The audit team has requested to get a report to better understand when and who has issued API calls against SSM Parameter Store. Which AWS service can you use to produce your report?
Correct answer - "CloudTrail" : It records API calls and helps determine source
Incorrect:
"SSM Parameter Store List feature" - There is no such thing
"SSM Parameter Store Access Logs in CloudWatch Logs" - CloudWatch can be integrated but it does not help determine who issued API calls
"SSM Parameter Store Access Logs in S3" - S3 can be integrated but it does not help determine who issued API calls
Examsnet