In a governance meeting, leaders ask which service answers operational health questions (metrics and alarms) versus who-did-what API history. Which pairing is correct?
Select an answer to reveal the explanation.
Short Explanation
CloudWatch watches the vital signs — latency, errors, alarms. CloudTrail keeps the paper trail of API calls for who changed what. Flip them and governance meetings get the wrong binder every time.
Full Explanation
Amazon CloudWatch provides metrics, logs, dashboards, and alarms for operational monitoring. AWS CloudTrail records API activity so organizations can audit actions taken in an account. Artifact, Inspector, and Shield address compliance documents, vulnerability findings, and DDoS protection respectively, not this monitoring-versus-auditing split.