Problem Statement
What is the role of AWS CloudTrail in incident response?
Explanation
AWS CloudTrail provides detailed event logs showing who did what and when.
It’s essential for identifying unauthorized access or suspicious API activity during investigations.