What is a characteristic of Amazon $S3$ server$-$side encryption with AWS Key Management Service $($AWS KMS$)$ keys $($SSE$-$KMS$)?$

The keys and algorithms are known only to the customer.

The application encrypts data before sending it to AWS.

The customer can audit usage of the key.

The customer manages the keys.