A SysOps Administrator manages an application that stores object metadata in Amazon S3. There is a requirement to have S2 server-side encryption enabled on all new objects in the bucket.
How can the Administrator ensure that all new objects to the bucket satisfy this requirement?

A. Create an S3 lifecycle rule to automatically encrypt all new objects.
B. Enable default bucket encryption to ensure that all new objects are encrypted.
C. Use put-object-aclto allow objects to be encrypted with S2 server-side encryption.
D. Apply the authorization header to S3 requests for S3 server-side encryption.