Correct answer - "CloudTrail" : When activity occurs in AWS CodePipeline, that activity is
recorded in a CloudTrail event along with other AWS service events in Event history. CloudTrail
can be used as an auditing tool which provides event history of your AWS account activity,
including actions taken through the AWS Management Console, AWS SDKs, command line tools, and
other AWS services. This event history simplifies security analysis, resource change tracking,
and troubleshooting.
Incorrect:
"CodePipeline Logs" - There are no logs for this service instead It is recommended by AWS to use
CloudTrail to capture API calls made by or on behalf of AWS CodePipeline in your AWS account and
deliver the log files to an Amazon S3 bucket.
"IAM" - IAM provides the infrastructure necessary to control authentication and authorization for
your account.
"CloudWatch Logs" - Use Amazon CloudWatch Logs to monitor, store, and access your log files from
Amazon Elastic Compute Cloud (Amazon EC2) instances, AWS CloudTrail, Route 53, and other sources
but not recommended for a pipeline.
For more information visit