A Developer decides to store highly secure data in Amazon S3 and wants to implement server-side encryption (SSE) with granular control of who can access the master key. Company policy requires that the master key be created, rotated, and disabled easily when needed, all for security reasons. Which solution should be used to meet these requirements?

Questions on how to write code and design scalable applications, implement application security and testing, and on AWS components such as S3, Dynamo DB, Elastic Beanstalk, and CloudFormation.