A regulator asks who changed the production endpoint last quarter and whether encryption settings drifted. CloudWatch metric dashboards cannot answer that. Which pair should they use?
Select an answer to reveal the explanation.
Short Explanation
A regulator asks who changed the endpoint and whether encryption drifted. Use CloudTrail for who called the APIs, and Config for configuration compliance. ModelLatency does not name the caller, and Model Monitor is not that audit.
Full Explanation
CloudTrail records who changed the endpoint. AWS Config tracks whether encryption and related settings stayed compliant. Model Monitor and ModelLatency are not that audit, and Translate is not a control-plane log. Stay with those in-scope services.