An incident investigation requires SQL-style analysis of long-term AWS user and API activity in a managed data lake that converts row-based JSON events into a columnar format optimized for fast retrieval. Which CloudTrail feature should the team use?

An engineer needs an immediate, searchable record of the last 90 days of management events in one AW...

A security operations team wants a record of AWS activities delivered to Amazon S3, with optional de...

A response team needs a service that shows how AWS resources are related to one another and how thos...

A compliance team wants resources evaluated continuously as they are created, changed, or deleted, a...

A production incident followed an infrastructure change, and the team must identify the last known g...