An e-commerce company is experiencing a significant increase in customer orders and needs to scale their application infrastructure to handle the load. They are using Amazon EC2 instances to run their application and storing customer data in Amazon RDS. To ensure data security and compliance, they need to implement encryption for data at rest and rotate encryption keys regularly. Which combination of AWS services should they use?