Audit logs are very powerful, and you should have them enabled on all your production services. In some instances, the audit logs can also proactively alert you to abnormal or anomalous behavior, allowing you to get ahead of a potential security incident.
Security engineering is an ever-evolving space. While prevention and planning are still very important, we also need to invest in detection and response.
Have you used the Secret Manager?