Operations needs managed threat findings for suspicious API activity and potentially compromised credentials. It wants detection based on supported AWS telemetry rather than maintaining its own collection of threat-detection rules. Which service is the best fit?

1. Amazon Inspector package vulnerability scanning alone.
2. AWS Config alone, with no security-detection integrations.
3. CloudTrail event history without an analysis or detection workflow.
4. Amazon GuardDuty.