An auditor needs to review who accessed objects in Cloud Storage buckets. What should you provide?

The correct answer is to enable Data Access audit logs and query them in Logs Explorer. Data Access audit logs record API calls that read or modify data within a Google Cloud service, such as object access in Cloud Storage. These logs are crucial for auditing data access. Logs Explorer provides a powerful interface to filter and analyze these logs. Assigning permissions and creating a Data Studio report on Admin Activity audit logs is incorrect because Admin Activity logs record operations that modify the configuration or metadata of resources, not data access. Using Cloud Monitoring to review metrics is also incorrect as Monitoring focuses on performance and health metrics, not individual data access events. Exporting Admin Activity audit logs via the Logs API is incorrect for the same reason as the Data Studio option: Admin Activity logs don't capture the required data access information.