Which statement is true regarding Amazon S$3$ default $($SSE$-$S$3)$ server$-$side encryption?

Data is encrypted using a customer$-$provided AWS KMS key.

Data is encrypted by the client before being sent to Amazon S$3.$

Users must provide the encryption keys.

Amazon $$3$ generates and mgnages the encryption keys.