AWS Certified Advanced Networking – Specialty ANS-C00 – Question147

You are auditing an AWS infrastructure after you noticed some abnormal charges on the bill. You use AWS Config to monitor your changes. What else is required to find out who made the change?

A.
There is no information to find this. You will need to sign up for Config Premium.
B. Use the eventID of the change and reference it with your Flow Logs.
C. Use the eventId of the change and reference it with CloudTrail to find the culprit.
D. Use the eventID of the change and reference it with CloudWatch to find the culprit.

Correct Answer: C

Explanation:

Explanation:
CloudTrail is for finding "who" performed an action.