Your organization has stored sensitive data in a Cloud Storage bucket, and for regulatory reasons, your company must be able to rotate the encryption key used to secure this data. The data, which will be later processed in Dataproc, requires a method that aligns with Google-recommended practices for security. What should you do to ensure both security and compliance?