The organization wants to receive an email alert whenever an IAM CreateUser API call occurs in the account. Which combination of steps should a SysOps administrator take to achieve this? (Choose two.)

To receive an email alert for an IAM CreateUser API call, you need to detect the API activity and then send a notification. AWS CloudTrail records all API calls made in your account, making it the appropriate event source for monitoring such actions. Amazon EventBridge (formerly CloudWatch Events) can then be configured with a rule to specifically filter for the CreateUser API call event from CloudTrail. Once EventBridge detects the specified event, it needs a target to send the notification. Amazon SNS (Simple Notification Service) is ideal for sending email alerts. You would configure an SNS topic as the target for the EventBridge rule and then subscribe an email address to that SNS topic. Incorrect options: Amazon CloudSearch and IAM Access Analyzer are not event sources for API call monitoring. Amazon SES (Simple Email Service) is used for sending emails programmatically, not as a direct target for EventBridge to send notifications to subscribed email addresses in this manner.