Create an identity policy granting read and write access, with a condition specifying that S3 paths must be prefixed with $(aws:username), and apply this policy to the scientists’ IAM user group.

Set up an AWS CloudTrail trail to record all object-level events in the S3 bucket, store the trail logs in another S3 bucket, and use Amazon Athena to query these logs for generating reports.

Enable S3 server access logging, configure another S3 bucket for log delivery, and use Amazon Athena to query these logs for generating reports.

Create an S3 bucket policy that grants read and write access to users in the scientists’ IAM user group.

Configure an AWS CloudTrail trail to capture all object-level events in the S3 bucket, write these events to Amazon CloudWatch, and use the Amazon Athena CloudWatch connector to query the logs for generating reports.