AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 400

Question

A SysOps administrator wants to share a copy of a production database with a migration account. The production database is hosted on an Amazon RDS DB instance and is encrypted at rest with an AWS Key Management Service (AWS KMS) key that has an alias of production-rds-key. What must the SysOps administrator do to meet these requirements with the LEAST administrative overhead?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Take a snapshot of the RDS DB instance in the production account. Amend the KMS key policy of the production-rds-key KMS key to give access to the migration account's root user. Share the snapshot with the migration a... Amazon RDS is a managed relational database that handles patching, backups and failover. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 400