A company maintains an application that uses an Amazon RDS DB instance for its database. A developer needs to implement encryption at rest for the database.
Which combination of steps should the developer take to meet this requirement? (Choose two.)

A. Enable encryption on the DB instance in the AWS Management Console.
B. Stop the DB instance.
C. Restore the DB instance from the encrypted snapshot.
D. Take a snapshot of the DB instance, and create an encrypted copy of the snapshot.
E. Create a customer managed key in AWS Key Management Service (AWS KMS).