An organisation needs a record of which identities invoked a model endpoint and when, for an incident investigation. Which service provides it?

Written from the published competencies and the AIF-C01 exam guide, version 1.4, which lists five content domains with published weightings and a task statement breakdown under each. Not actual exam questions, and not affiliated with or endorsed by Amazon Web Services.