A financial company is migrating banking applications to AWS accounts managed through AWS Organizations. The applications store sensitive customer data on Amazon EBS volumes, and the company takes regular snapshots for backups. The company must implement controls across all accounts to prevent sharing EBS snapshots publicly, with the least operational overhead. Which solution will meet these requirements?