How do you handle encryption at rest and in transit?

Answer preview

Key rotation: Enable automatic annual key rotation in KMS. For application-level encryption, implement envelope encryption for efficient key rotation.…