A SysOps Administrator has received a request from the Compliance Department to enforce encryption on all objects uploaded to the corp-compliance bucket.
How can the Administrator enforce encryption on all objects uploaded to the bucket?

A. Enable Amazon S3 default encryption on the bucket
B. Add the following policy statement to the bucket:

C. Add the following policy statement to the IAM user permissions policy:

D. Generate a resigned URL for the Amazon S3 PUT operation with server-side encryption flag set, and send the URL to the user