A SysOps Administrator must ensure all Amazon EBS volumes currently in use, and those created in the future, are encrypted with a specific AWS KMS customer master key (CMK).
What is the MOST efficient way for the Administrator to meet this requirement?

A. Create an AWS Lambda function to run on a daily schedule, and have the function run the aws ec2 describe-volumes –filtersencrypted command.
B. Within AWS Config, configure the encrypted-volumes managed rule and specify the key ID of the CMK.
C. Log in to the AWS Management Console on a daily schedule, then filter the list of volumes by encryption status, then export this list.
D. Create an AWS Lambda function to run on a daily schedule, and have the function run the aws kms describe-keycommand.