A company has an API deployed in a single Region: API Gateway Regional + Lambda. The API calls an external vendor API, stores data in a DynamoDB global table, and the vendor API key is stored in AWS Secrets Manager encrypted with a customer-managed KMS key. The company wants the API components to run across multiple Regions in an active-active setup. Which set of changes will achieve this with the LEAST operational overhead? (Choose three.)

To achieve an active-active setup with minimal operational overhead, deploying the API Gateway and Lambda to multiple Regions is essential. Route 53 with a multivalue answer routing policy allows all healthy regional endpoints to be returned, enabling client-side load balancing and active-active traffic distribution. For the KMS key, creating a multi-Region customer-managed key and replica keys in each target Region ensures the same key material is available across Regions, simplifying key management. Finally, replicating the existing Secrets Manager secret to other Regions and configuring each replica with the appropriate regional KMS key provides secure, consistent access to the vendor API key without manual copying, which is prone to errors and higher overhead.