AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 942

Question

A company regularly uploads confidential data to Amazon S3 buckets for analysis. The company's security policies mandate that the objects must be encrypted at rest. The company must automatically rotate the encryption key every year. The company must be able to track key rotation by using AWS CloudTrail. The company also must minimize costs for the encryption key. Which solution will meet these requirements?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Use server-side encryption with AWS KMS keys (SSE-KMS) AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest. This option delivers the requirement at the lowest cost.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 942