This is a dedicated watch page for a single video.
A financial AI system processes confidential transaction records on AWS and stores results in Amazon S3. The security team wants to ensure all encryption keys are centrally managed, and access to those keys is restricted by role. What is the most appropriate solution?