A cloud audit log shows a service identity listing secrets it has never accessed before, shortly after a new access key was created. What data is most useful next?

1. Only the cloud provider's marketing region names
2. Only the number of dashboard users
3. Only the current account billing currency
4. Key creation provenance, caller context, and subsequent secret access