The correct answer is Nonrepudiation. This security property guarantees that a user cannot later deny having performed a specific action on a resource.

Nonrepudiation is achieved by creating verifiable and tamper resistant evidence that links an action to an identity and a time. Typical mechanisms include digital signatures that cryptographically bind the actor to the action, secure timestamps, and protected audit records with strong access and integrity controls.

Layered defense refers to using multiple overlapping security controls to reduce risk. It improves overall security posture but it does not itself prevent a user from denying they performed a specific action.

Cloud Audit Logs provide records of events and are useful evidence when investigating actions. They are a supporting mechanism and do not by themselves guarantee nonrepudiation unless the logs are protected and made cryptographically verifiable.

Division of responsibilities means separating duties to reduce fraud and errors. That control enhances accountability but it is not the same as providing cryptographic proof that an individual performed a particular action.

Full AWS Practitioner Certification Question