A company is looking to encrypt data at rest for their Amazon DynamoDB table, which contains sensitive information. They want to guarantee that the encryption does not affect the performance of their application. Which service should they use to accomplish this without managing server-side encryption themselves?
Enable Amazon DynamoDB's default encryption at rest using AWS managed keys
Implement client-side encryption before storing the data in the DynamoDB table
Create an IAM role with a policy that enforces encryption at rest
Force all connections to the DynamoDB table to use SSL/TLS