AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 252

Question

A SysOps administrator is building a process for sharing Amazon RDS database snapshots between different accounts associated with different business units within the same company. All data must be encrypted at rest. How should the administrator implement this process?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Update the key policy to grant permission to the AWS KMS encryption key used to encrypt the snapshot with all relevant accounts, then share the snapshot with those accounts. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 252