A solutions architect needs a record of every API call made in an AWS account, including the identity, source IP, and parameters, delivered to a tamper-resistant S3 bucket for compliance audits. Which service provides this?

Pick an option to reveal the answer.