A company wants to securely exchange data between its software as a service (SaaS) application Salesforce account and Amazon S3. The company must encrypt the data at rest by using AWS Key Management Service (AWS KMS) customer managed keys (CMKs). The company must also encrypt the data in transit. The company has enabled API access for the Salesforce account.

• ACreate AWS Lambda functions to transfer the data securely from Salesforce to Amazon S3.
• BCreate an AWS Step Functions workflow. Define the task to transfer the data securely from Salesforce to Amazon S3.
• CCreate Amazon AppFlow flows to transfer the data securely from Salesforce to Amazon S3.
• DCreate a custom connector for Salesforce to transfer the data securely from Salesforce to Amazon S3.