After deploying a fleet of Compute Engine instances in Google Cloud, you must ensure that monitoring metrics and logs are accessible in both Cloud Logging and Cloud Monitoring for your company's operations and cybersecurity teams, while adhering to the principle of least privilege. What IAM roles should you assign to the Compute Engine service accounts?