Detection, logging, and posture services: AWS CloudTrail, AWS Config, Amazon GuardDuty, Amazon Inspector, and AWS Security Hub

By the end you’ll be able to

• Identify AWS CloudTrail as the service that records AWS API activity and account events for governance, compliance, and operational auditing.
• Identify AWS Config as the service that records resource configuration changes and evaluates configurations against desired rules or policies.