A company stores highly confidential information in an Amazon S3 bucket. The security team requires that any changes to the bucket policy are automatically remediated, and alerts of these changes are sent to their team members. Which actions should a security engineer take to meet these requirements with the LEAST effort?