Which AWS service allows you to deliver logged activity made by "Root" credentials to a stream?

The correct choice is CloudTrail. This AWS service specifically captures and logs API calls made within your AWS account, including activity executed by the root user and other IAM users. CloudTrail enables you to monitor and retain activity logs, which can be essential for security analysis and compliance auditing.

When it comes to streaming logged activity, CloudTrail can deliver logs to various storage options, but the key functionality it provides is the logging of those API calls, making it easy to track user activities and changes in resource states. It integrates well with services like Amazon S3 for log storage and can be configured to deliver real-time logs to Kinesis Data Streams for processing, which is why it is associated with streamed data.

Kinesis Data Streams is a powerful streaming service, but it does not specifically log API calls or activities. It is designed for processing and analyzing real-time streaming data rather than logging AWS account activities.

Amazon S3 is primarily a storage service and doesn’t log API calls by itself; it can store logs that CloudTrail generates, but it does not generate the logs. Similarly, Amazon DynamoDB is a NoSQL database service and does not deal with AWS activity logging, making it unrelated to the context of delivering logged activity from root credentials.

Thus