What is a key feature of AWS CloudTrail?

AWS CloudTrail is designed specifically to enable governance and compliance auditing within an AWS environment. One of its primary functions is to log and monitor AWS account activity, which includes capturing API calls made from AWS services. This means that every interaction an AWS user or service has with AWS resources is recorded, detailing who made the call, the resources involved, the actions taken, and the time of the interaction.

This rich auditing capability is critical for organizations that need to comply with regulatory standards and internal governance policies. By providing detailed logs of all activities, CloudTrail facilitates tracking down security issues or unauthorized access, ensuring that organizations can maintain compliance and quickly respond to any irregularities in their AWS environments.

The other options, while relevant to other AWS services or features, do not capture the primary and critical functionality of CloudTrail, which centers around monitoring and auditing for compliance purposes.