A security analyst must explain how Amazon GuardDuty differs from AWS CloudTrail for a city AWS environment. Which contrast is accurate?
Select an answer to reveal the explanation.
Short Explanation
CloudTrail is the signed guestbook of API calls; GuardDuty is the security guard reading signals and raising threat findings. One is primarily an audit trail, the other is primarily threat detection — they complement each other, they are not twins, and neither is a CDN or a replacement for IAM.
Full Explanation
Amazon GuardDuty is a threat detection service that analyzes data sources to surface security findings, whereas AWS CloudTrail primarily records API activity for auditing and governance. The services address related but different questions: suspicious patterns versus who invoked which APIs. Framing them as identical CDNs or as replacements for IAM and VPC misunderstands their purposes.