A financial services company manages its IT infrastructure on AWS. The security team at the company has been tasked to monitor and report all the root user activities of the AWS account. Which options should be combined as a solution so that the security team can meet these requirements? (Select two)