An existing, deployed solution uses Amazon EC2 instances with Amazon EBS General Purpose SSD volumes, am Amazon RDS PostgreSQL database, anAmazon EFS file system, and static objects stored in an Amazon S3 bucket.The Security team now mandates that at-rest encryption be turned on immediately for all aspects of the application, without creating new resources and without any downtime.
To satisfy the requirements, which one of these services can the SysOps Administrator enable at-rest encryption on?
EBS General Purpose SSD volumes
RDS PostgreSQL database
Amazon EFS file systems
S3 objects within a bucket
I evaluate that the answer is:
S3 objects within a bucket