For a security audit, a team needs a record of every API call made to SageMaker and who made it. Which service provides this audit trail?
- A. AWS CloudTrail✓ Correct
- B. Amazon S3 Transfer Acceleration
- C. Amazon SNS
- D. Amazon CloudWatch metrics only
Explanation
AWS CloudTrail logs API activity across the account — who called which API, when, and from where — the audit trail for governance. CloudWatch metrics (D) show performance, not a full API audit; SNS (C) is messaging; and S3 Transfer Acceleration (B) speeds uploads — neither audits API calls.