A company requires all data that is stored in Amazon DynamoDB tables to be encrypted at rest with keys that are managed by the company.
How can a developer meet these requirements WITHOUT changing the application?

A. Use the AWS Encryption SDK to encrypt items before insertion.
B. Enable table-level encryption with an AWS managed customer master key (CMK).
C. Use AWS Certificate Manager (ACM) to create one certificate for each DynamoDB table.
D. Import key material in DynamoDB, and enable table-level encryption.