A sysops administrator is reviewing AWS Trusted Advisor warnings and encounters a warning for an...

Encrypt the S3 bucket content with Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3).

Create an origin access identity and grant it permissions to read objects in the S3 bucket.

Assign an 1AM user to the CloudFront distribution and whitelist the 1AM user in the S3 bucket policy.

Assign an 1AM role to the CloudFront distribution and whitelist the 1AM role in the S3 bucket policy.