A company uses Amazon Elastic Container Registry (Amazon ECR) for its production applications. A security engineer must implement an automated solution to report any vulnerabilities that ECR enhanced scanning detects and send instant notifications to the company’s Slack account. Which solution provides the most operational efficiency?

This solution is the most operationally efficient because it leverages native AWS services for automation and integration. Amazon Inspector provides enhanced scanning for ECR, and EventBridge can directly capture Inspector findings. Routing these findings to an SNS topic, which is then subscribed to by AWS Chatbot, allows for direct, automated notifications to Slack without custom code or additional compute resources. The other options are less efficient: Running a script on an EC2 instance introduces operational overhead for managing the instance and the script, and it's not a fully serverless, event-driven solution. An AWS Step Functions state machine is overly complex for this task; EventBridge and SNS provide a simpler, more direct integration path. AWS Security Hub aggregates findings but doesn't perform the ECR scanning itself (Inspector does). While Security Hub can integrate with EventBridge, the direct integration from Inspector to EventBridge for this specific use case is more streamlined.