Detect Unencrypted Buckets and Remediate

Problem

Given a list of paginated API response payloads, each containing storage bucket metadata as JSON-like Python dictionaries, write a function that returns all unencrypted buckets and the remediation actions that should be triggered for them. A bucket is unencrypted if its encryption status is missing, disabled, or explicitly set to a noncompliant value. The output must be deterministic, deduplicated by bucket ID, and sorted by account, region, and bucket name.

Constraints

• 1 <= len(pages) <= 10^4
• Each page contains a buckets list, which may be empty
• 1 <= total number of bucket records across all pages <= 2 * 10^5
• Bucket IDs are strings and should be used for deduplication
• Missing encryption or missing enabled means the bucket is noncompliant