A CodePipeline is integrated with CodeDeploy to deploy application versions to EC2 instances across stages. A recent deployment failed because of a CodeDeploy problem. The DevOps team wants better monitoring and automated alerts during deployments to shorten time to resolution. What should the DevOps engineer implement to generate notifications when deployment issues occur?

The correct answer leverages EventBridge to capture real-time events from CodePipeline and CodeDeploy. EventBridge is ideal for reacting to state changes in AWS services. A Lambda function can then process these events, apply custom logic to identify specific deployment failures (beyond what simple EventBridge rules might offer), and publish detailed alerts to an SNS topic. This provides immediate, customized notifications for rapid response. Incorrect options: CloudWatch Logs with AWS Config rules are less direct for real-time deployment failure detection. CloudWatch Logs require parsing log streams, and AWS Config rules are primarily for resource compliance, not active deployment monitoring. CloudTrail records API calls, which can be voluminous and require significant processing to extract real-time deployment failure information. It's better for auditing than real-time operational alerts. Amazon Inspector is a security assessment service, not designed for monitoring deployment failures or integrating with CodePipeline/CodeDeploy events for operational alerts.