A health-care services company has strong regulatory requirements and it has come to light recently that some of the EBS volumes have not been encrypted. It is necessary for the company to monitor and audit compliance over time and alert the corresponding teams if unencrypted EBS volumes are detected. How should a DevOps Engineer implement an alert for the unencrypted EBS volumes with the least administrative overhead?