A company is evaluating Amazon S3 as a data storage solution for their daily analyst report. The company has implemented stringent requirements concerning the security of the data at rest. Specifically, the CISO asked for the use of envel

ope encryption with separate permissions for the use of an envelope key, automated rotation of the encryption keys, and visibility into when an encryption key was used and by whom.

Which steps should a Solutions Architect take to satisfy the security requ

irements requested by the CISO?

A. Create an Amazon S3 bucket to store the reports and use Server-Side Encryption with Customer-Provided Keys (SSE-C).

B. Create an Amazon S3 bucket to store the reports and use Server-Side Encryption with Amazon S3-Managed

Keys (SSE-S3).

C. Create an Amazon S3 bucket to store the reports and use Server-Side Encryption with AWS KMS-Managed Keys (SSE-KMS).

D. Create an Amazon S3 bucket to store the reports and use Amazon s3 versioning with Server-Side Encryption with Amazon

S3-Managed Keys (SSE-S3).

Reference