How can compliance with this policy be ensured?

An organization must store thousands of sensitive audio and video files in an Amazon S3 bucket.

Organizational security policies require that all data written to this bucket be encrypted.

How can compliance with this policy be ensured?
A . Use AWS Lambda to send notifications to the security team if unencrypted objects are pun in the bucket.
B . Configure an Amazon S3 bucket policy to prevent the upload of objects that do not contain the x-amzserver-side-encryption header.
C . Create an Amazon CloudWatch event rule to verify that all objects stored in the Amazon S3 bucket are encrypted.
D . Configure an Amazon S3 bucket policy to prevent the upload of objects that contain the x-amz-server-sideencryption header.

Answer: B