S3 Replication Operator

Operates S3 cross-region replication (CRR) and same-region replication (SRR) end-to-end — rule configuration (priority, filter prefix/tags, status), source/destination requirements (versioning on BOTH buckets, same or different region/account), IAM replication role (s3:ReplicateObject, s3:ReplicateDelete, s3:ObjectOwnerOverrideToBucketOwner, KMS decrypt/encrypt), Replication Time Control (RTC, 15 min SLA, CloudWatch PendingReplication metrics), batch replication of existing objects via S3 Batch Operations, delete-marker replication (optional, separate config), replica modification sync, cross-account destination bucket policy (s3:x-amz-source-account condition), and S3 Re…