Encryption of data at rest on Amazon S3 is often implemented using:

Answer choices

1. a. Route 53 health checks, while leaving refresh tokens and OAuth consent grants active pending user callback, without security or identity team coordination per policy.
2. b. S3 server-side encryption with KMS or S3-managed keys
3. c. Resources shared with external entities, without preserving cloud audit logs or hunting mailbox rules and delegate permissions, without security or identity team coordination per policy.
4. d. Creating and managing encryption keys, using password reset alone and deferring session revocation until the next business day