What can an Administrator do to monitor whether an organization’s instances are compliant with corporate policies and guidelines?

A. Check the instances’ metadata to determine what software is running.
B. Use AWS CloudTrail logs to identify the applications running on the instances.
C. Set CloudWatch alarms that are triggered with any software change on the instances.
D. Using Config Rules in the AWS Config service to check the instance’s configuration and applications.