An S3 application requires encrypted transport and should reject ordinary HTTP requests. Which bucket-policy condition addresses this?

1. Shorten the object lifecycle expiration period.
2. Deny requests when aws:SecureTransport is false, with appropriate service-access considerations.
3. Add https to the bucket name.
4. Enable server-side encryption only and assume it enforces TLS.