AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 202

Question

A company is planning to move its data to an Amazon S3 bucket. The data must be encrypted when it is stored in the S3 bucket. Additionally, the encryption key must be automatically rotated every year. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Move the data to the S3 bucket. Use server-side encryption with Amazon S3 managed encryption keys (SSE-S3). Use the built-in key rotation behavior of SSE-S3 encryption keys. Amazon S3 provides durable, scalable object storage that is fully managed.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 202