Which combination of actions using AWS services should the security engineer take to accomplish this goal?

A security engineer needs to configure monitonng and auditing for AWS Lambda.

Which combination of actions using AWS services should the security engineer take to accomplish this goal? (Select TWO.)
A . Use AWS Config to track configuration changes to Lambda functions, runtime environments, tags, handler names, code sizes, memory allocation, timeout settings, and concurrency settings, along with Lambda IAM execution role, subnet, and security group associations.
B . Use AWS CloudTrail to implement governance, compliance, operational, and risk auditing for Lambda.
C . Use Amazon Inspector to automatically monitor for vulnerabilities and perform governance, compliance, operational, and risk auditing for Lambda.
D . Use AWS Resource Access Manager to track configuration changes to Lambda functions, runtime environments, tags, handler names, code sizes, memory allocation, timeout settings, and concurrency settings, along with Lambda IAM execution role, subnet, and security group associations.
E . Use Amazon Macie to discover, classify, and protect sensitive data being executed inside the Lambda function.

View Answer

Answer: A,B