Which options can achieve this?

A company is implementing a data lake solution on Amazon S3. Its security policy mandates that the data stored in Amazon S3 should be encrypted at rest.

Which options can achieve this? (Select TWO.)
A . Use S3 server-side encryption with an Amazon EC2 key pair.
B . Use S3 server-side encryption with customer-provided keys (SSE-C).
C . Use S3 bucket policies to restrict access to the data at rest.
D . Use client-side encryption before ingesting the data to Amazon S3 using encryption keys.
E . Use SSL to encrypt the data while in transit to Amazon S3.

View Answer

Answer: BD