To monitor and receive notifications when a KMS key deletion is scheduled, you can implement the following steps:

Create an Amazon EventBridge Rule:AWS KMS emits events to EventBridge when a key deletion is scheduled. You can create an EventBridge rule that listens for these specific events. This rule can then trigger actions, such as sending notifications or initiating automated workflows.

Create an Amazon SNS Topic:Amazon SNS is a fully managed messaging service that enables you to decouple and scale microservices, distributed systems, and serverless applications. By configuring the EventBridge rule to send events to an SNS topic, you can ensure that notifications are sent to the appropriate recipients, such as the security team.

By combining these two services, you can effectively monitor for scheduled deletions of KMS keys and notify the relevant stakeholders without altering the developers' IAM permissions.