That's a great blog Sandeep, Indeed.

Additionally we can add one more fine tuning to receive the notifications for only certain types of critical IAM roles(eg: Owner, Editor, Project IAM Admin etc.