You are required to implement a security measure where you can audit who has accessed encryption keys in your GCP project. Which GCP service provides this capability?

*Explanation:* A. Incorrect, Cloud KMS is for managing keys but doesn't provide audit logs itself. B. Correct, Cloud Audit Logs can be used to audit who has accessed encryption keys. C. Incorrect, Cloud DLP is for identifying sensitive data. D) Incorrect, Stackdriver Logging is a part of Cloud Monitoring and doesn't specialize in key auditing. E) Incorrect, Cloud Security Command Center is for security analytics and doesn't specialize in key auditing.