How can Cloud Shell's logging capabilities be leveraged to review past DDoS protection events and actions?

Cloud Shell operations are typically logged by the underlying cloud provider's audit and activity logging services (e.g., GCP Cloud Audit Logs, Azure Activity Logs/Monitor, AWS CloudTrail). Users can leverage CLI commands within Cloud Shell itself to query these logging services. For example, using `gcloud logging read`, `az monitor activity-log list`, or `aws cloudtrail lookup-events`, one can filter logs to review commands executed related to DDoS protection services, identify who made specific configuration changes, and analyze logs for records of detected DDoS attacks and the subsequent automated or manual mitigation actions taken.