A company needs email alerts for CRITICAL findings from AWS Security Hub. There is no existing integration. Which solution will meet this requirement?

The correct solution leverages EventBridge to detect Security Hub findings and SNS for email notifications. EventBridge can directly filter for critical Security Hub findings using an event pattern. Once a critical finding is matched, EventBridge can send this event to an SNS topic. SNS natively supports email subscriptions, allowing you to easily configure an email address to receive these alerts. Option 1 is less efficient because the Lambda function adds unnecessary compute overhead to filter findings that EventBridge can filter directly. Option 2 is incorrect because Kinesis Data Firehose is designed for delivering streaming data to destinations like S3, Redshift, or Splunk, not for sending direct email notifications. Option 4 is overly complex. While SES can send emails, integrating it directly as an EventBridge target for this purpose requires more custom development to format and send emails compared to the simpler SNS email subscription.