A company has an application that generates large binary data outside of AWS. The company must encrypt the data before uploading the data to an Amazon S3 bucket.
Which solution will meet this requirement?

A. Use the AWS Key Management Service (AWS KMS) encrypt command in the AWS CLI.
B. Configure server-side encryption on the S3 bucket.
C. Use the AWS Encryption SDK to perform client-side encryption of the data.
D. Specify the x-amz-server-side-encryption header when uploading the data to the S3 bucket.