A company stores sensitive data in an Amazon S3 bucket. The security team must log all object-level activity for that bucket and retain the logs for 5 years. The security team also must receive an email notification whenever there is an attempt to delete data in the bucket. Which combination of steps meets these requirements most cost-effectively? (Choose three.)

Configuring AWS CloudTrail to log S3 data events is essential for capturing all object-level activity, including deletions, which fulfills the logging requirement. Creating a separate S3 bucket for logs and applying an S3 Lifecycle policy ensures cost-effective 5-year retention by transitioning logs to lower-cost storage tiers like S3 Glacier. Configuring S3 to send object deletion events to Amazon EventBridge, which then publishes to an Amazon SNS topic, allows for email notifications to the security team upon deletion attempts. S3 server access logging provides access logs but not detailed object-level activity like CloudTrail data events. Sending events directly to Amazon SES is not a native S3 event notification option. Storing logs in Amazon Timestream is not the most cost-effective or standard solution for S3 access logs; S3 is preferred for this purpose.