CLF-C02 · Question #694
A company wants to push VPC Flow Logs to an Amazon S3 bucket. Which action is the company's responsibility?
The correct answer is C. Managing the encryption options on the S3 bucket. Managing the encryption options on the S3 bucket is the customer's responsibility under the AWS shared responsibility model. The customer must choose and configure options like SSE-S3, SSE- KMS, or client-side encryption. Managing infrastructure is AWS's responsibility. Data in t
Question
A company wants to push VPC Flow Logs to an Amazon S3 bucket. Which action is the company's responsibility?
Options
- AManaging the infrastructure that runs the S3 bucket
- BManaging the data in transit
- CManaging the encryption options on the S3 bucket
- DManaging the operating system updates on the S3 bucket
How the community answered
(37 responses)- A3% (1)
- C92% (34)
- D5% (2)
Explanation
Managing the encryption options on the S3 bucket is the customer's responsibility under the AWS shared responsibility model. The customer must choose and configure options like SSE-S3, SSE- KMS, or client-side encryption. Managing infrastructure is AWS's responsibility. Data in transit to S3 is secured by AWS unless customer adds additional layers. S3 is a fully managed service, so customers do not manage operating system updates.
Community Discussion
No community discussion yet for this question.