Which of the following solutions will accomplish this task?

A Developer wants to upload data to Amazon S3 and must encrypt the data in transit.

Which of the following solutions will accomplish this task? (Choose two.)
A . Set up hardware VPN tunnels to a VPC and access S3 through a VPC endpoint
B . Set up Client-Side Encryption with an AWS KMS-Managed Customer Master Key
C . Set up Server-Side Encryption with AWS KMS-Managed Keys
D . Transfer the data over an SSL connection
E . Set up Server-Side Encryption with S3-Managed Keys

Answer: B,D

Explanation:

https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingEncryption.html