A physician's office management application requires that all data in transit between an EC2 instance and n Amazon EBS volume be encrypted.
Which of the following techniques fulfills this requirement? (Choose two.)

A. Create encrypted snapshots into Amazon S3.
B. Use Amazon RDS with encryption.
C. Use IAM roles to limit access to the Amazon EBS volume.
D. Enable EBS encryption.
E. Leverage OS-level encryption.