A. Create a Lambda@Edge function to encrypt data when CloudFront processes a client request. Configure the distribution to invoke the Lambda@Edge function when the origin request event occurs. Most Voted
B. Generate an AWS Key Management Service (AWS KMS) customer managed key that Lambda@Edge can use. Most Voted
C. Create an SSL/TLS certificate in AWS Certificate Manager (ACM). Associate the certificate with the Network Load Balancer.
D. Set up a Network Load Balancer for API Gateway private integrations.
E. Store the data in the S3 bucket by using server-side encryption with Amazon S3 managed encryption keys (SSE-S3). Transfer the encrypted data from the S3 bucket to the DynamoDB table.