Due to a recent security audit at DataCorp, the infrastructure team needs to enable encryption at rest using SSE-S3 on S3 buckets containing millions of objects that are used for sharing sensitive documents between two business units, each with its own AWS account in a single AWS Organization, and these buckets currently use one-way replication. What is the MOST operationally efficient solution that meets these requirements?