AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 106

Question

A company is preparing to store confidential data in Amazon S3. For compliance reasons, the data must be encrypted at rest. Encryption key usage must be logged for auditing purposes. Keys must be rotated every year. Which solution meets these requirements and is the MOST operationally efficient?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Server-side encryption with AWS KMS keys (SSE-KMS) with automatic rotation AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 106