a) A developer is managing an application hosted in EC2, which stores data in an S3 bucket. To comply with the new security policy, the developer must ensure that the data is encrypted at rest using an encryption key that is provided and managed by the company. The change should also provide AES-256 encryption to their data. Based on your understanding, which approaches may be adopted when storing sensitive data on S3 storage option in the AWS? Discuss your answer in your own words.

(5 marks)

b) A startup has recently launched a high-quality photo sharing portal using Amazon EC2 and S3. The company noticed that there are other external websites which are linking and using their photos without permission. This has caused an increase on their data transfer cost and potential revenue loss. Based on your understanding, recommend a most effective method to solve this issue.