A company is auditing its AWS account for compliance purposes. They need a service that allows them to review the historical activity of AWS API calls and track resource configuration changes over time to ensure they are aligned with compliance rules. Which combination of services will best meet this requirement?