Re: AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 100
A: Missing encrypt/decrypt process. B: "Store the function in an Amazon S3 bucket" made meaningless. D: Amazon Elastic Block Store (Amazon EBS) for clone all of hard disk, CD/DVD. The context of question requires near real-time, it need save small parts, not a big part. --> Choose C (with S3, AWS Key Management Service - AWS KMS).
See https://docs.aws.amazon.com/kms/index.html . Decrypt process https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html .