Câu 80: AWS Certified Developer Associate(Old)

A company stores documents in Amazon S3 with default settings. A new regulation requires the company to encrypt the documents at rest, rotate the encryption keys annually, and keep a record of when the encryption keys were rotated. The company does not want to manage the encryption keys outside of AWS. Which solution will meet these requirements?

1. A. Use server-side encryption with Amazon S3 managed encryption keys (SSE-S3).
2. B. Use server-side encryption with AWS KMS managed encryption keys (SSE-KMS). — đáp án hiện tại
3. C. Use server-side encryption with customer-provided encryption keys (SSE-C).
4. D. Use client-side encryption before sending the data to Amazon S3.