A financial services company must be able to answer the question 'who did what, where, and when' across their Google Cloud environment for internal investigations and regulatory reporting. The security team needs a record of administrative actions such as changes to IAM policies and the creation or deletion of resources. Which Google Cloud capability should they rely on to meet this requirement?