Which category of GCP audit log records every incident in which a user or service account is denied access to a resource?
System Event
Data Access
Policy Denied
Admin Activity