A company needs a cloud-based solution for backup, recovery, and archiving while retaining encryption key...

Create an AWS Key Management Service (AWS KMS) key without key material. Import the company's key material into the KMS key.

Create an AWS KMS encryption key that contains key material generated by AWS KMS.

Store the data in Amazon S3 Standard-Infrequent Access (S3 Standard-IA). Use S3 Bucket Keyswith AWS KMS keys.

Store the data in an Amazon S3 Glacier storage class. Use server-side encryption with customer-provided keys (SSE-C).

Store the data in AWS Snowball devices. Use server-side encryption with AWS KMS keys (SSE-KMS).