Exam AWS Certified Cloud Practitioner topic 1 question 360 discussion

The AWS service that the system administrator should use to identify who made the change of terminating an Amazon EC2 instance in the company's AWS account is C. AWS CloudTrail. AWS CloudTrail records all AWS API calls made on your account, including who made the call, what actions were performed, and the source IP address. By examining CloudTrail logs, you can trace actions back to specific users or services and determine who terminated the EC2 instance.

AWS CloudTrail is a service that records API calls and events for your AWS account. It provides visibility into actions taken by users, services, or even AWS itself. With CloudTrail, you can track who made changes to your resources, what actions were performed, and from which IP addresses or sources the actions originated. This makes it a suitable choice for identifying who terminated the Amazon EC2 instance and investigating any other unauthorized or unexpected activities in your AWS account.

C. AWS CloudTrail https://www.amazonaws.cn/en/cloudtrail/#:~:text=Amazon%20CloudTrail%20increases%20visibility%20into,and%20when%20the%20calls%20occurred. "You can troubleshoot operational issues by leveraging the Amazon API call history produced by Amazon CloudTrail. For example, you can quickly identify the most recent changes made to resources in your environment, including creation, modification, and deletion of Amazon Web Services resources (e.g., Amazon EC2 instances, Amazon VPC security groups, and Amazon EBS volumes)."

The AWS service that the system administrator should use to identify who terminated an Amazon EC2 instance in their AWS account is AWS CloudTrail.

C is the answer.