An application has a requirement to be resilient across not only Availability Zones within the application's primary region but also be available within another...

An application has a requirement to be resilient across not only Availability Zones within the application's primary region but also be available within another region altogether.
Which of the following supports this requirement for AWS resources that are encrypted by AWS KMS?