AWS Certified Developer - Associate DVA-C02 — Topic 1 Question 150

Question

A developer is planning to migrate on-premises company data to Amazon S3. The data must be encrypted, and the encryption keys must support automatic annual rotation. The company must use AWS Key Management Service (AWS KMS) to encrypt the data. Which type of keys should the developer use to meet these requirements?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Symmetric customer managed keys with key material that is generated by AWS.

AWS Certified Developer - Associate DVA-C02 — Question 150