Correct answer - "CloudTrail" : CloudTrail provides event history of your AWS account activity,
including actions taken through the AWS Management Console, AWS SDKs, command line tools, and
other AWS services. This event history simplifies security analysis, resource change tracking,
and troubleshooting.
Incorrect:
"VPC Flow Logs" - VPC Flow Logs is a feature that enables you to capture information about the IP
traffic going to and from network interfaces in your VPC
"KMS policies" - Key policies are the primary way to control access to customer master keys
(CMKs) in AWS KMS
"IAM" - Helps you securely control access to AWS resources
For more information visit