A company wants to ensure the data stored in their Amazon S3 buckets is protected. What is the BEST method to automatically protect data at rest within an Amazon S3 bucket?
Configure an Amazon S3 bucket policy to enforce encryption on upload
Use AWS Key Management Service Managed Keys (SSE-KMS) for both encryption and decryption
Implement Client-Side Encryption for data before uploading to Amazon S3
Enable Amazon S3 Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3)