Application logs include structured request_id, error_code, and duration fields. An engineer needs the most frequent error codes during the last hour. Which tool is the most direct fit?

1. CloudWatch Logs Insights with filtering, aggregation, and the required time range.
2. Only S3 bucket lifecycle configuration.
3. Only a Lambda deployment ZIP listing.
4. A static screenshot of yesterday CPU metrics.