A fleet writes structured JSON logs with deployment_id and error_code. An incident team needs error counts for the newest release over the last 30 minutes. Which tool is the most direct fit?

1. Only a billing dashboard for the complete month.
2. A static template comment describing normal behavior.
3. CloudWatch Logs Insights filtering by deployment_id and aggregating by error_code in the selected time range.
4. Only a list of AMI names used last year.