The responsibility of overseeing the security of an AWS account falls on the SysOps administrator. In a recent incident, an IAM user's access key was accidentally uploaded to a publicly accessible code repository. The SysOps administrator's task is to determine any modifications or changes made using this compromised access key. What steps should the SysOps administrator take to fulfill these requirements?