A company is migrating an application to AWS and aims to utilize fully managed services to the greatest extent possible. They require a solution for storing large, important documents that meet the following criteria: 1) high durability and availability, 2) encryption of data at rest and in transit, and 3) management and periodic rotation of the encryption keys by the company. Which solution should the solutions architect recommend?