A software company must ensure that documents that are uploaded by users are securely stored in Amazon S3. The documents must be encrypted at rest in Amazon S3. The company wants to avoid client-side encryption and does not want to manage the security infrastructure. In addition, the company wants control over the keys that are used for encryption at rest. Which solution for encryption keys should a developer use to meet these requirements?

Topic #: - All AWS Certified Developer Associate Questions

A. Amazon S3 managed keys
B. Application-level encryption with customer-provided encryption keys that are stored in an on-premises hardware security module (HSM)
C. AWS Key Management Service (AWS KMS) customer managed keys Most Voted
D. IAM access keys

- Awsexamhub website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Suggested Answer:

Share this post

Join the Discussion