AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 284

Question

A company is building an interactive application for personal finance. The application stores financial data in Amazon S3, and the data must be encrypted. The company does not want to provide its own encryption keys. However, the company wants to maintain an audit trail that shows when an encryption key was used and who used the key. Which solution will meet these requirements?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Use server-side encryption with AWS KMS managed encryption keys (SSE-KMS) to encrypt the user data on Amazon S3. Amazon S3 provides durable, scalable object storage that is fully managed. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 284