Your organization stores sensitive data in Azure Blob Storage and requires that all data at rest be encrypted. You need to ensure that the encryption keys are managed securely and that the solution complies with industry standards. Which approach should you implement to achieve this?