Abstract: Google Cloud Platform (GCP) built in Audit Logs, Cloud Identity and Access Management (lAM), and Kuber-netes Events capture every privileged action and configuration change, yet security ...