How can you secure data at rest on an EBS volume?

How can you secure data at rest on an EBS volume?

A.
Attach the volume to an instance using EC2’s SSL interface.

B.
Write the data randomly instead of sequentially.

C.
Use an encrypted file system on top of the BBS volume.

D.
Encrypt the volume using the S3 server-side encryption service.

E.
Create an IAM policy that restricts read and write access to the volume.