A governance team wants a history of supported resource configuration changes and a way to evaluate those configurations against its rules. Which service best matches this requirement?

1. AWS Config
2. AWS Secrets Manager
3. Amazon CloudFront
4. AWS CloudTrail alone