A large professional services client utilizes Google Cloud for some of its workloads. The DevOps team needs to ensure all logs indicating actions taken by Google staff within the account are routed to a separate logging bucket. Which solution accomplishes this?