Enable CloudTrail and create an Amazon EventBridge rule for AWS API Call via CloudTrail that matches dynamodb DeleteTable and targets an SNS topic is correct because CloudTrail captures the management API call and EventBridge can match the DeleteTable action and route the event to an SNS topic for near real time alerting within the required 90 seconds while keeping costs low.

This solution uses CloudTrail to record the API activity and EventBridge to filter for the specific dynamodb DeleteTable call and deliver the notification to a SNS topic. This avoids continuous log ingestion and extra compute to parse logs or run a Lambda for every event which makes it the most cost effective and timely option.

Stream CloudTrail to CloudWatch Logs, add a metric filter for DeleteTable, trigger Lambda, and publish to SNS is workable but it incurs ongoing log ingestion and metric filter scanning costs and also requires Lambda invocations which raise costs and complexity compared with direct EventBridge routing.

Enable DynamoDB Streams and use a Lambda consumer to send SNS alerts when records are deleted cannot detect a DeleteTable API call because DynamoDB Streams only emits item level change records and does not include table level management operations.

Use AWS Config to record DynamoDB resources and a custom rule to notify SNS on table deletion is less suitable because Config focuses on configuration snapshots and compliance evaluations and can have evaluation latency and additional rule execution costs which makes it a heavier and slower approach for near real time API call alerts.

Full AWS Practitioner Certification Question