A company keeps sensitive information in an S3 bucket and must record all access attempts. The risk team must be alerted immediately whenever an object delete operation occurs. Which solution fulfills both requirements?

The correct solution uses S3 server access logging to record all access attempts, providing a comprehensive audit trail. For immediate alerts on DeleteObject operations, S3 Event Notifications can be configured directly on the bucket to publish to an Amazon SNS topic. This provides real-time notification to the risk team. The other options are less efficient or do not meet the "immediately" requirement. Running daily cron jobs on EC2 instances for scanning logs introduces significant latency, failing to provide immediate alerts. Sending S3 access data to CloudWatch Logs for auditing is possible, but configuring CloudWatch Alarms for DeleteObject events directly from S3 access logs can be complex and less direct than S3 Event Notifications for specific object-level actions. Comparing item lists daily also fails the immediate notification requirement.