A production Auto Scaling group was supposed to maintain a minimum of three EC2 instances, but it scaled down to two and the group's configuration now shows a minimum of two. Which AWS service can reveal who changed the Auto Scaling group's minimum capacity?

AWS Config records configuration changes to your AWS resources, including Auto Scaling groups. It can show a timeline of changes, including who made the change (the principal), when it happened, and the old and new values for the configuration item (like minimum capacity). This makes it ideal for auditing and identifying unauthorized or accidental changes. Amazon Inspector is a security assessment service that checks for vulnerabilities. Amazon Macie is a data security and privacy service that discovers and protects sensitive data. Amazon CloudWatch Logs collects and monitors logs from various AWS services, but it doesn't inherently track configuration changes in the same detailed, auditable way as AWS Config.