A Developer is designing a new application that uses Amazon S3. To satisfy compliance requirements, the Developer must encrypt the data at rest.
How can the Developer accomplish this?

A. Use s3:x-amz-aclas a condition in the S3 bucket policy.
B. Use Amazon RDS with default encryption.
C. Use aws:SecureTransportas a condition in the S3 bucket policy.
D. Turn on S3 default encryption for the S3 bucket.