Tracking Re-Certifying External Sharing

We need to ensure

When a user is sharing a document with an external user,

Admin must have control

1. To expire the link and revoke access as and when needed

2. Ensure owner of the document recertify the as and when needed or on a standard no. of days for externally shared docs

3. Can Activity Policy in Microsoft Cloud App Security do this

4. What are the possible ways to do it using a Solution or Developing one programmatically-powershell etc..