A healthcare provider is using Amazon Kinesis Data Streams to ingest patient health data in real time from various monitoring devices. Due to regulatory requirements, the data must be stored immutably for at least one year, and all data transfers need to be encrypted. What combination of features will ensure compliance with these regulations?