AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 681

Question

A company uses Amazon EC2 instances and stores data on Amazon Elastic Block Store (Amazon EBS) volumes. The company must ensure that all data is encrypted at rest by using AWS Key Management Service (AWS KMS). The company must be able to control rotation of the encryption keys. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Create a customer managed key. Use the key to encrypt the EBS volumes. Amazon EBS provides block storage attached to a single EC2 instance.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 681