An IT administrator has been given the task of unloading data from various Redshift tables. The company has mandated that all data which is unloaded is encrypted at rest. Which of the following can help accomplish this? Choose 3 answers from the options given below

Answer options:

A.Use S3 server-side encryption with KMS Keys
B.Use S3 server-side encryption with a customer-managed key
C.Use client-side encryption with a customer-managed key
D.Use the default AWS Managed encryption

Answer – A, C and D
The AWS Documentation mentions the following
UNLOAD automatically creates files using Amazon S3 server-side encryption with AWS-managed encryption keys (SSE-S3). You can also specify server-side encryption with an AWS Key Management Service key (SSE-KMS) or client-side encryption with a customer-managed key (CSE-CMK). UNLOAD doesn`t support Amazon S3 server-side encryption using a customer-supplied key (SSE-C).
For more information on unloading encrypted files, please visit the url
https://docs.aws.amazon.com/redshift/latest/dg/t_unloading_encrypted_files.html