A CloudWatch Event Rule that detects changes to S3 bucket policies and publishes change events to an SNS topic for notification.