AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 371

Question

A company needs to create an Amazon Elastic Kubernetes Service (Amazon EKS) cluster to host a digital media streaming application. The EKS cluster will use a managed node group that is backed by Amazon Elastic Block Store (Amazon EBS) volumes for storage. The company must encrypt all data at rest by using a customer managed key that is stored in AWS Key Management Service (AWS KMS). Which combination of actions will meet this requirement with the LEAST operational overhead? (Choose two.)

Accepted Answer

Correct answer: C, D. The correct answer is C, D. Option C: Enable EBS encryption by default in the AWS Region where the EKS cluster will be created. Select the customer managed key as the default key. Option D: Create the EKS cluster. Create an IAM role that has a policy that grants permission to the customer managed key. Associate the role with the EKS cluster. Amazon EKS runs managed Kubernetes when you need the Kubernetes ecosystem. Amazon EBS provides block storage attached to a single EC2 instance. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 371