A financial services company runs a fraud-detection model on a real-time SageMaker endpoint. The security team needs to be alerted automatically when the endpoint experiences an unusual spike in invocation errors or latency, which could indicate a denial-of-service attempt or a malfunctioning model. They want a native AWS solution that requires no custom polling code. Which approach best meets this requirement?