Which of the following methods can achieve this?

A company is storing data on Amazon Simple Storage Service (53). The company’s security policy mandates that data is encrypted at rest.

Which of the following methods can achieve this? Choose 3answers
A . Use Amazon 53 server-side encryption with AWS Key Management Service managed keys.
B . Use Amazon 53 server-side encryption with customer-provided keys.
C . Use Amazon 53 server-side encryption with EC2 key pair.
D . Use Amazon 53 bucket policies to restrict access to the data at rest.
E . Encrypt the data on the client-side before ingesting to Amazon 53 using their own master key.
F . Use SSL to encrypt the data while in transit to Amazon 53.

Answer: A, B, E

Explanation:

Reference: http://docs.aws.amazon.com/Amazon$3/latest/dev/UsingKMSEncryption.html