A SysOps Administrator Must Ensure All Amazon EBS Volumes Currently

Multiple Choice

A SysOps Administrator must ensure all Amazon EBS volumes currently in use, and those created in the future, are encrypted with a specific AWS KMS customer master key (CMK) . What is the MOST efficient way for the Administrator to meet this requirement?

A) Create an AWS Lambda function to run on a daily schedule, and have the function run the aws ec2 describe-volumes --filters encrypted command. Create an AWS Lambda function to run on a daily schedule, and have the function run the aws ec2 describe-volumes --filters encrypted command.
B) Within AWS Config, configure the encrypted-volumes managed rule and specify the key ID of the CMK.
C) Log in to the AWS Management Console on a daily schedule, then filter the list of volumes by encryption status, then export this list.
D) Create an AWS Lambda function to run on a daily schedule, and have the function run the aws kms describe-key command. aws kms describe-key command.