An Amazon S3 bucket named team-cebu-devops is shared by all the DevOps administrators in the team. It is used to store artifact files for several CI/CD pipelines. A junior developer accidentally modified the S3 bucket policy, denying all pipelines from downloading the required artifact files and causing all deployments to halt. To prevent similar issues in the future, the team wants to be notified of any S3 bucket policy changes to identify and take action if any problem occurs quickly. Which of the following options will help achieve this?