AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 916

Question

A company is designing an application on AWS that processes sensitive data. The application stores and processes financial data for multiple customers. To meet compliance requirements, the data for each customer must be encrypted separately at rest by using a secure, centralized key management solution. The company wants to use AWS Key Management Service (AWS KMS) to implement encryption. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Create separate AWS KMS keys for each customer's data that have granular access control and logging enabled. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 916