A Lambda function processes data before sending it to a downstream service. Each piece of data is approximately 1MB in size. After a security audit, the function is now required to encrypt the data before sending it downstream.
Which API call is required to perform the encryption?

A. Pass the data to the KMS ReEncrypt API for encryption.
B. Use the KMS GenerateDataKey API to get an encryption key.
C. Use the KMS GenerateDataKeyWithoutPlainText API to get an encryption key.
D. Pass the data to KMS as part of the Encrypt API for encryption.