Which category of GCP audit log records every incident in which a user or service account is denied access to a resource?
Admin Activity
System Event
Policy Denied
Data Access