Which AWS service can a solutions architect use to identify the IAM user responsible for unintended configuration changes to security group rules during a production deployment?