Which approach should be used to accomplish this task?

An Amazon Kinesis stream needs to be encrypted.

Which approach should be used to accomplish this task?
A . Perform a client-side encryption of the data before it enters the Amazon Kinesis stream on the producer.
B . Use a partition key to segment the data by MD5 hash function, which makes it undecipherable while in transit.
C . Perform a client-side encryption of the data before it enters the Amazon Kinesis stream on the consumer.
D . Use a shard to segment the data, which has built-in functionality to make it indecipherable while in transit.

Answer: A

Explanation:

Reference: https://docs.aws.amazon.com/firehose/latest/dev/encryption.html