AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 535

Question

A company is building an Amazon Elastic Kubernetes Service (Amazon EKS) cluster for its workloads. All secrets that are stored in Amazon EKS must be encrypted in the Kubernetes etcd key-value store. Which solution will meet these requirements?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Create a new AWS Key Management Service (AWS KMS) key. Enable Amazon EKS KMS secrets encryption on the Amazon EKS cluster. Amazon EKS runs managed Kubernetes when you need the Kubernetes ecosystem. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 535