Question

A financial services company must demonstrate to auditors that all administrative configuration changes to Google Cloud resources over the past 18 months can be produced on demand. The compliance team discovers that Admin Activity audit logs are being relied upon for this evidence, but is concerned they will not satisfy the 18-month retention requirement. Which action correctly addresses this concern while minimizing operational overhead?

Accepted Answer

Admin Activity logs are retained by default for 400 days, so create a log sink that routes them to a log bucket or Cloud Storage with an 18-month retention policy

Answer

Enable Data Access audit logs for all services, since Admin Activity logs are only retained for 30 days

Answer

Manually export the _Required log bucket contents each week to a spreadsheet to preserve them beyond their default 30-day retention

Answer

Disable the _Required bucket and create a new default bucket with a custom retention period to capture Admin Activity logs