Encrypt your data with customer-managed keys (CMK) to enable an extra layer of security for data at rest.