A security team needs an audit history showing which AWS identity made a supported API request, when it happened, and the requested operation. Which service is most directly suited to this task?

1. AWS Pricing Calculator
2. Amazon CloudWatch metrics alone
3. AWS CloudTrail
4. AWS Artifact