To satisfy an audit that requires visibility into administrative changes to resource configuration or metadata, what should you do?

The GCP Console Activity page provides a high-level overview of administrative activities. For detailed audit requirements, Cloud Logging captures all administrative actions (Admin Activity logs) by default, including who made changes, what resources were affected, and when. This provides the granular detail needed for audits. Cloud Trace is for debugging application performance. Cloud Monitoring focuses on metrics and operational health, not detailed administrative change logs. Identity-Aware Proxy (IAP) controls access to applications and resources, but doesn't log administrative configuration changes.