A company wants to analyze and troubleshoot Access Denied errors and Unauthorized errors that are related to IAM permissions. The company has AWS CloudTrail turned on. Which solution will meet these requirements with the LEAST effort?

1. Use AWS Glue and write custom scripts to query CloudTrail logs for the errors.
2. Use AWS Batch and write custom scripts to query CloudTrail logs for the errors.
3. Search CloudTrail logs with Amazon Athena queries to identify the errors.
4. Search CloudTrail logs with Amazon QuickSight. Create a dashboard to identify the errors.