A cloud architect is designing at-rest encryption for a large object storage repository holding millions of files. To limit the performance impact of rotating master keys and to avoid re-encrypting every object when a master key changes, the team decides to encrypt each object with its own unique data encryption key, then encrypt those data encryption keys with a centrally managed master key. Which encryption design does this approach describe?