A financial services company runs a customer-facing chatbot on Amazon Bedrock protected by a Bedrock Guardrail. The security team wants to be automatically alerted whenever the guardrail blocks a high volume of user inputs within a short window, since a spike may indicate a coordinated jailbreak or prompt-injection attack. They need a near-real-time detection mechanism without building a custom log-parsing pipeline. Which approach best meets this requirement?