A compliance team needs administrative activity evidence showing the principal, resource, and time of supported Google Cloud changes. Which approach best fits?

1. Configure an appropriately scoped aggregated log sink.
2. Install and configure the Ops Agent for the required telemetry.
3. Use Cloud Audit Logs.
4. Create a logs-based metric and a monitoring alert.