An Amazon RDS for MySQL DB instance named "mysql-db" was deleted within the last 90 days. A developer must identify which IAM user or role performed the deletion. Which approach will provide this information?

AWS CloudTrail records API calls and related events made in your AWS account, including who made the call, when, from what IP address, and what resources were affected. To find out who deleted an RDS instance, you would look for the DeleteDBInstance event in CloudTrail logs, filtering by the resource name "mysql-db". The event details will include the userIdentity field, which identifies the IAM user or role that performed the action. CloudWatch logs are for application and system logs, not for tracking API actions. AWS X-Ray is for distributed tracing of requests through applications, not for auditing AWS resource deletions. AWS Systems Manager inventory tracks resource configurations and software, not historical deletion events.