A compliance team needs administrative activity evidence showing the principal, resource, and time of supported Google Cloud changes. Which approach best fits?

1. Use Cloud Audit Logs.
2. Configure an appropriately scoped aggregated log sink.
3. Create a logs-based metric and a monitoring alert.
4. Install and configure the Ops Agent for the required telemetry.