A company stores operations data in an Amazon S3 bucket. For an annual audit, an external consultant needs access to one annual report stored in the bucket for 7 days. The consultant must be able to access only that report. Which solution provides this access with the MOST operational efficiency?

Generating a presigned URL is the most operationally efficient solution because it grants temporary, time-limited access to a specific S3 object without requiring AWS credentials or modifying bucket policies. The URL can be set to expire after 7 days, automatically revoking access. Creating a new S3 bucket and migrating data is overly complex and inefficient for temporary access to a single file. Enabling public access to the entire S3 bucket is a significant security risk, granting unauthorized access to all data, not just the report. Creating a new IAM user and sharing access keys is less secure than a presigned URL, requires managing credentials, and involves manual revocation, which is less efficient.