SurveyCentral's application, composed of microservices running in an auto-scaled ECS cluster behind an ALB and CloudFront, handles sensitive survey data that needs encryption, ensuring only the data-handling microservice can decrypt it. Which solution meets SurveyCentral's data encryption requirements?