A CloudWatch Event Rule that detects KMS Customer Master Key (CMK) changes and publishes change events to an SNS topic for notification. Events include key creation, deletion, or key enabling/disabling operations, imported key material operations, as well as updates to CMK key policies.

CloudFormation Template