Track who changed the configuration of an internal generative-AI application and when.
Use the records for incident investigations and compliance checks.
Which audit design is most appropriate?
Record API activity with CloudTrail and design retention, access, encryption, and tamper-resistance policies for the trail.
Detailed explanation
CloudTrail records API activity; retention, access, encryption, and integrity must also be designed.
CloudTrail records API activity; retention, access, encryption, and integrity must also be designed.
Short retention prevents investigation and compliance evidence.
Short retention prevents investigation and compliance evidence.
The context needed to reconstruct an event would be missing.
The context needed to reconstruct an event would be missing.
Unrestricted modification undermines log integrity.
Unrestricted modification undermines log integrity.
Try it yourself
An example you can run in a temporary verification environment.
AWS CloudTrail User GuideとAWS Well-Architected Security Pillarのログ・監査方針を確認する。Expected result
記録するだけでなく、保持・アクセス制御・改ざん防止を含む監査設計を説明できる。Key points
- CloudTrail
- Audit trail
- Retention and integrity
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Command output formatting can vary slightly by distribution or tool version.
- Run the example in a temporary directory or process when possible.
Foundation review
Read the scope first
Check whether the command acts on the current shell, a new process, an existing process, or a file.
Verify the observable result
Use the supplied command and compare the output with the expected result.