AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 189

Question

A company needs to store contract documents. A contract lasts for 5 years. During the 5-year period, the company must ensure that the documents cannot be overwritten or deleted. The company needs to encrypt the documents at rest and rotate the encryption keys automatically every year. Which combination of steps should a solutions architect take to meet these requirements with the LEAST operational overhead? (Choose two.)

Accepted Answer

Correct answer: B, D. The correct answer is B, D. Option B: Store the documents in Amazon S3. Use S3 Object Lock in compliance mode. Option D: Use server-side encryption with AWS Key Management Service (AWS KMS) customer managed keys. Configure key rotation. Amazon S3 provides durable, scalable object storage that is fully managed. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 189