The company must enforce tag requirements on all Amazon DynamoDB tables across accounts. A SysOps admin needs a low-maintenance solution that finds tables missing required tags and remediates them. Which solution provides enforcement with the least ongoing operational work?

The correct solution leverages AWS Config's required-tags managed rule, which automatically evaluates resources for tag compliance. This is low-maintenance because AWS manages the rule's logic. Configuring an automatic remediation action with AWS Systems Manager Automation further reduces operational work by automatically applying missing tags without manual intervention. Custom Lambda functions, whether scheduled by EventBridge or triggered by a custom Config rule, require writing and maintaining code, increasing operational overhead. EventBridge managed rules are for event-driven actions, not for continuous compliance evaluation of resource configurations like AWS Config.