A healthcare company stores patient data in an S3 bucket accessed by Glue jobs, Athena, and third-party applications. A compliance audit requires that all data transfers to and from the bucket must occur only over encrypted connections. The security team needs to enforce this at the bucket level so that any request made over an unencrypted channel is rejected, regardless of the requesting service. Which approach meets this requirement?