The correct answer is B. AWS Key Management Service (KMS) allows secure management and use of encryption keys. In this scenario, the Lambda function can use an AWS KMS key to generate data keys that encrypt and decrypt data before writing it to the /tmp storage. This method ensures that the temporary data is encrypted while adhering to security best practices required for sensitive applications like healthcare.