A company's system administrator discovers that someone logged in to the company's AWS account during the weekend and terminated an Amazon EC2 instance.
Which AWS service should the system administrator use to identify who made this change?

A. Amazon Inspector
B. Amazon Pinpoint
C. AWS CloudTrail
D. AWS Trusted Advisor