A company wants to receive a notification whenever a new AWS root account sign-in occurs. Which combination of services achieves this?