In a multi-account AWS environment, the Data Wizards sales team stores petabytes of data in a KMS-encrypted S3 bucket, while the Marketing Mavericks marketing team needs to access this data with QuickSight, already configured with an IAM role in their account. Which solution allows the Marketing Mavericks team to securely access the Data Wizards' S3 bucket with the least operational overhead?