Correct answer - "Use the Encryption SDK" : The AWS Encryption SDK is an encryption library that
helps make it easier for you to implement encryption best practices in your application.
Incorrect:
"KMS Encrypt API Call" - Although you might use it to encrypt small amounts of data, such as a
password or RSA key, they are not designed to encrypt application data, especially in this size
amount
"S3 Encrypt API Call" - You can encrypt data in your code using SDK but only can encrypt if
storing objects in S3
"IAM Encrypt API Call" - Does not allow this functionality but can use IAM to set policies if
needed