A Company Plans to Store Sensitive User Data on Amazon

Multiple Choice

A company plans to store sensitive user data on Amazon S3. Internal security compliance requirement mandate encryption of data before sending it to Amazon S3. What should a solution architect recommend to satisfy these requirements?

A) Server-side encryption with customer-provided encryption keys
B) Client-side encryption with Amazon S3 managed encryption keys
C) Server-side encryption with keys stored in AWS key Management Service (AWS KMS)
D) Client-side encryption with a master key stored in AWS Key Management Service (AWS KMS)