A Developer Decides to Store Highly Secure Data in Amazon

Multiple Choice

A Developer decides to store highly secure data in Amazon S3 and wants to implement server-side encryption (SSE) with granular control of who can access the master key. Company policy requires that the master key be created, rotated, and disabled easily when needed, all for security reasons. Which solution should be used to meet these requirements?

A) SSE with Amazon S3 managed keys (SSE-S3)
B) SSE with AWS KMS managed keys (SSE-KMS)
C) SSE with AWS Secrets Manager
D) SSE with customer-provided encryption keys