AWS Certified SAP on AWS - Specialty PAS-C01 — Topic 1 Question 4

Question

A company is implementing SAP HANA on AWS. According to the company’s security policy, SAP backups must be encrypted. Only authorized team members can have the ability to decrypt the SAP backups. What is the MOST operationally efficient solution that meets these requirements?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Configure AWS Backint Agent for SAP HANA to use AWS Key Management Service (AWS KMS) for SAP backups. Create a key policy to grant decryption permission to authorized team members only. AWS Backup centrally automates and manages backups across AWS services. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified SAP on AWS - Specialty PAS-C01 — Question 4