AWS Certified Developer - Associate DVA-C02 — Topic 1 Question 188

Question

A developer is storing sensitive data generated by an application in Amazon S3. The developer wants to encrypt the data at rest. A company policy requires an audit trail of when the AWS Key Management Service (AWS KMS) key was used and by whom. Which encryption option will meet these requirements?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Server-side encryption with AWS KMS managed keys (SSE-KMS) AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

AWS Certified Developer - Associate DVA-C02 — Question 188