For compliance reasons, an organization limits the use of resources to three specific AWS regions. It wants to be alerted when any resources are launched in una...

For compliance reasons, an organization limits the use of resources to three specific AWS regions. It wants to be alerted when any resources are launched in unapproved regions.
Which of the following approaches will provide alerts on any resources launched in an unapproved region?