An enterprise wants to improve operational excellence by automatically remediating unencrypted EBS volumes. Which solution requires the LEAST operational overhead?

Write a custom AWS Lambda function triggered by CloudTrail events to encrypt volumes.

Use AWS Config rules with an automated remediation action using AWS Systems Manager Automation documents.

Run a daily cron job on an EC2 instance to scan and encrypt volumes.

Use AWS Trusted Advisor to automatically encrypt the volumes.