During the migration of an on-premises data warehouse to BigQuery, Cloud SQL, and Cloud Storage, you're tasked with configuring security services in compliance with company policies. The data warehouse must adhere to the following requirements: Protect data at rest with full lifecycle management on cryptographic keys. Implement a separate key management provider from data management. Provide visibility into all encryption key requests. Which services should be integrated into the data warehouse implementation? Choose two options: