Use Customer-managed keys (CMK) encryption