DJames617 Service Comparison
CloudWatch vs CloudTrail vs AWS Config
Metrics/logs, API audit, and configuration history answer different questions.
What They Have in Common
Each option can solve part of the scenario. The exam expects you to choose the one that satisfies the stated constraints with the right operational burden, security boundary, availability model, and cost behavior.
Key Differences
| Option | Primary model | Best use | Security | Availability | Operations and cost |
|---|---|---|---|---|---|
| CloudWatch | Operational telemetry | What is happening now or in app/resource logs? | Log access and retention | Detect and alarm | Logs, metrics, alarms |
| CloudTrail | API activity audit | Who called which AWS API and when? | Protect trails and log buckets | Forensic timeline | Data events can be costly |
| AWS Config | Configuration history/compliance | How is the resource configured and did it drift? | Recorder scope and rule access | Compliance evidence | Config items and rule evals |
Typical Exam Clues
Practice After Studying
Return to the certification guide that includes this comparison and launch domain training from there.