The company must monitor many Amazon S3 buckets across two AWS Regions and report the percentage of objects that are encrypted. Compliance teams need a single dashboard showing these metrics. Which approach meets the requirements with the least operational overhead?

The S3 Storage Lens default dashboard provides account-level metrics across all buckets in all Regions, including object encryption status, directly addressing the requirement for a single dashboard with minimal operational overhead. It automatically aggregates data, eliminating the need for custom code or manual data aggregation. Granting compliance teams access to the S3 console allows them to view this pre-built dashboard. Creating separate S3 Storage Lens dashboards in each Region and then aggregating them in QuickSight adds unnecessary complexity and operational overhead compared to the default dashboard's capabilities. Deploying Lambda functions, saving results to S3, and querying with Athena is a custom solution that introduces significant operational overhead for development, deployment, and maintenance. Using EventBridge and Lambda for object-creation events would only track new objects, not existing ones, and would also incur significant operational overhead for development and maintenance.