DJames617 Service Comparison
CloudWatch vs CloudTrail vs AWS Config
Metrics/logs, API audit, and configuration history answer different questions.
What They Have in Common
Each option can solve part of the scenario. The exam expects you to choose the one that satisfies the stated constraints with the right operational burden, security boundary, availability model, and cost behavior.
Key Differences
| Option | Primary model | Best use | Security | Availability | Operations and cost |
|---|---|---|---|---|---|
| CloudWatch | Operational telemetry | What is happening now or in app/resource logs? | Log access and retention | Detect and alarm | Logs, metrics, alarms |
| CloudTrail | API activity audit | Who called which AWS API and when? | Protect trails and log buckets | Forensic timeline | Data events can be costly |
| AWS Config | Configuration history/compliance | How is the resource configured and did it drift? | Recorder scope and rule access | Compliance evidence | Config items and rule evals |
Typical Exam Clues
Practice After Studying
Return to the certification guide that includes this comparison and launch domain training from there.
Sources and Review Metadata
This independent training application is not affiliated with or endorsed by Amazon Web Services. AWS, Amazon Web Services, and AWS certification names are trademarks of Amazon.com, Inc. or its affiliates.