A compliance team needs administrative activity evidence showing the principal, resource, and time of supported Google Cloud changes. Which approach best fits?

1. Create a logs-based metric and a monitoring alert.
2. Use Cloud Audit Logs.
3. Install and configure the Ops Agent for the required telemetry.
4. Configure an appropriately scoped aggregated log sink.