A compliance team needs administrative activity evidence showing the principal, resource, and time of supported Google Cloud changes. Which approach best fits?

1. Configure an appropriately scoped aggregated log sink.
2. Install and configure the Ops Agent for the required telemetry.
3. Create a logs-based metric and a monitoring alert.
4. Use Cloud Audit Logs.