Governance, Compliance, and Risk Auditing Services in AWS

Answer - B.

The AWS Documentation mentions the following:

AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account.

With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure.

CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services.

This event history simplifies security analysis, resource change tracking, and troubleshooting.

For more information on AWS CloudTrail, please refer to the below URL:

https://aws.amazon.com/cloudtrail/

The service in AWS that helps in governance, compliance, and risk auditing is AWS CloudTrail (Option B).

AWS CloudTrail is a service that provides a record of all AWS API calls made in your account. It captures detailed information about who made the API call, when it was made, which services were accessed, and what actions were performed. This information is stored in a log file, which can be analyzed and used to track changes and troubleshoot operational issues.

The AWS CloudTrail log file can be used for governance, compliance, and risk auditing purposes. For example, it can help you meet compliance requirements by providing an audit trail of all API calls made in your account. It can also help you identify security risks by alerting you to unusual API activity or unauthorized access attempts.

AWS CloudFormation (Option A) is a service that provides templates for creating and managing AWS resources. It is used for infrastructure as code, allowing users to create, manage, and provision resources in an automated and repeatable manner.

AWS CloudWatch (Option C) is a monitoring and observability service that provides metrics, logs, and alarms for AWS resources and applications. It can be used to monitor resource utilization, detect and diagnose operational issues, and take automated actions in response to changes in the environment.

AWS SNS (Option D) is a messaging and notification service that can be used to send text or email messages to subscribers. It is used for event-driven architectures, allowing users to publish and subscribe to messages that are triggered by events in their AWS environment. It can be used to automate workflows and notify users of changes in their environment.

While these services may have some security and compliance features, they are not specifically designed for governance, compliance, and risk auditing purposes like AWS CloudTrail.