Develop an AWS CloudFormation template that incorporates an AWS Inspector rule to verify the encryption status of EBS volumes. Store this template in an Amazon S3 bucket accessible to all company accounts. Modify the account creation script to reference the CloudFormation template in the S3 bucket.

Establish an AWS Config organizational rule to monitor whether EBS volumes are encrypted. Deploy this rule via the AWS CLI. Additionally, create and enforce a Service Control Policy (SCP) to prevent the disabling or removal of AWS Config within the organization.

Set up a Service Control Policy (SCP) within AWS Organizations to block the initiation of Amazon EC2 instances with unencrypted EBS volumes. Apply this policy across all AWS accounts. Utilize Amazon Athena to scrutinize AWS CloudTrail logs for events that indicate a denial of the ec2:RunInstances action due to encryption requirements.

Distribute an IAM role to all accounts from a central trusted account. Construct a pipeline using AWS CodePipeline that includes an AWS Lambda stage to assume the IAM role and enumerate all EBS volumes in each account. Generate a compliance report and store it in an Amazon S3 bucket.