Amazon CloudWatch is correct because it collects and visualizes metrics and logs sets alarms and provides dashboards that reveal performance utilization and error trends across accounts and Regions so teams can continuously observe operational health and identify right sizing opportunities.

Amazon CloudWatch aggregates metrics and logs from AWS services and custom sources and lets you build dashboards and alarms for proactive alerting and automated responses. These capabilities enable BrightCart Labs to monitor utilization across five accounts and three Regions identify idle or underutilized resources and make data driven decisions to lower costs.

AWS Control Tower is focused on establishing and governing a secure multi account landing zone and on provisioning and governance guardrails rather than on collecting performance metrics or providing dashboards and alarms for utilization monitoring.

AWS CloudTrail records API calls and user activity for auditing and security investigations and it does not provide continuous performance metrics dashboards or alarming features needed for right sizing resources.

AWS Config tracks resource configurations and compliance state and it is useful for auditing configuration drift and compliance checks but it does not deliver the metrics based monitoring and alarm features required for real time health and utilization analysis.

Full AWS Practitioner Certification Question