Ultimate access to all questions.
A security team is tasked with developing a solution using Amazon EventBridge to monitor Amazon S3 objects for public access and any modifications to S3 bucket policies or settings that could lead to public access. They have set up EventBridge to track specific API calls recorded in AWS CloudTrail logs and to immediately notify the security team via Amazon SNS with details of these API calls. The team is particularly interested in monitoring the s3:PutObjectAcl, s3:DeleteBucketPolicy, and s3:PutBucketPolicy API calls. During the development phase, they notice that while the s3:DeleteBucketPolicy and s3:PutBucketPolicy API calls trigger EventBridge events, the s3:PutObjectAcl API call does not. The team has already enabled CloudTrail for AWS management events with a basic setup in the relevant AWS Region, and they have confirmed that the EventBridge event pattern is correctly configured. To ensure that the s3:PutObjectAcl API call triggers an EventBridge event without causing false notifications, which solution should the team implement?