What is the MOST operationally efficient solution that meets these requirements?
Create a script that runs against the S3 bucket and outputs the status of each object.
Create an S3 Inventory configuration on the S3 bucket. Include the appropriate status fields.
Provide the security team with an IAM user that has read access to the S3 bucket.
Use the AWS CLI to output a list of all objects in the S3 bucket.
Explanations:
Creating a script to check the encryption status of each object is operationally inefficient and would require custom development and maintenance.
Using an S3 Inventory configuration is the most operationally efficient way to verify the encryption status of all objects in a bucket.
Providing an IAM user with read access does not provide an efficient way to verify encryption; it only grants access without checking encryption.
Using the AWS CLI would require manually listing objects and inspecting each one for encryption, which is less efficient than S3 Inventory.
It appears that the answer is:
Create an S3 Inventory configuration on the S3 bucket. Include the appropriate status fields.