AWS Certified Developer Associate (#22)

A company needs to encrypt data at rest, but it wants to leverage an AWS managed service using its own master key. Which of the following AWS service can be used to meet these requirements?

SSE with Amazon S3
SSE with AWS KMS
Client-side encryption
AWS IAM roles and policies