A government has access to sensitive data which is currently on the cloud in an S3 bucket. The data includes data such as: citizens’ social security number, addresses and income. The government will hire a team of machine learning engineers to train models based on this data in the future. The government needs a reliable encryption method to encrypt the data at rest and requires a method where they could manage and use AWS encryption keys. Which encryption method should they use?