A DevOps engineer needs to back up sensitive objects from a private S3 bucket to a target bucket in a different AWS Region and different AWS account using S3 cross-Region replication. Which combination of actions is required to enable cross-account, cross-Region replication? (Choose three.)

Cross-account, cross-Region S3 replication requires specific configurations. First, a replication IAM role must be created in the source account. This role grants Amazon S3 permissions to replicate objects on your behalf. Second, the target bucket policy needs statements allowing this replication IAM role (from the source account) to write replicated objects to the target bucket. This establishes the necessary cross-account access. Finally, a replication rule must be created in the source bucket. This rule defines what objects to replicate, where to replicate them (the target bucket), and specifies the IAM role created in the source account to perform the replication. Creating a replication IAM role in the target account is unnecessary as the source account's role handles the replication. Creating a replication rule in the target bucket is incorrect; rules are configured on the source. Adding statements to the source bucket policy is not directly required for the replication process itself, as the IAM role handles permissions.