You need to implement an encryption-at-rest solution that meets the following requirements:

• Schedule automatic key rotation for sensitive data.
• Control the geographical region where encryption keys for sensitive data are stored.
• Minimize access latency for encryption keys used for both sensitive and non-sensitive data. What should you do?*