Key Management Service $($KMS$)$ is used to manage encryption keys in your AWS environment. How can you audit the changes made on KMS$?$

Select one answer

KMS provides full audit details as part of KMS console which can be accessed through web interface and APIs.

KMS provides history to each key changes; you can track the changes done on each key using key history.

KMS will log all changes in a special S$3$ bucket that is created the first time KMS service is being used.

KMS has full audit and compliance integration with CloudTrail; this is where you can audit all changes performed on $KMS.$