DVA-C02 · Question #564
A developer is building an application that stores sensitive user data. The application includes an Amazon CloudFront distribution and multiple AWS Lambda functions that handle user requests. The…
The correct answer is C. Configure the CloudFront distribution to use WebSockets by forwarding all viewer request. CloudFront supports field-level encryption, which allows you to encrypt specific parts of the request data (such as sensitive user data fields) before it is sent to the origin. By configuring CloudFront to use field-level encryption and integrating it with AWS KMS, you can…
Question
A developer is building an application that stores sensitive user data. The application includes an Amazon CloudFront distribution and multiple AWS Lambda functions that handle user requests. The user requests contain over 20 data fields. Each application transaction contains sensitive data that must be encrypted. Only specific parts of the application need to have the ability to decrypt the data. Which solution will meet these requirements?
Options
- AAssociate the CloudFront distribution with a Lambda@Edge function. Configure the function to
- BIntegrate AWS WAF with CloudFront to protect the sensitive data. Use a Lambda function and
- CConfigure the CloudFront distribution to use WebSockets by forwarding all viewer request
- DConfigure the cache behavior in the CloudFront distribution to require HTTPS for communication
How the community answered
(28 responses)- A14% (4)
- B7% (2)
- C50% (14)
- D29% (8)
Explanation
CloudFront supports field-level encryption, which allows you to encrypt specific parts of the request data (such as sensitive user data fields) before it is sent to the origin. By configuring CloudFront to use field-level encryption and integrating it with AWS KMS, you can securely encrypt sensitive data using KMS-managed keys and ensure that only specific parts of your application (such as your origin or Lambda functions) can decrypt the data. This solution is designed for handling sensitive data in a way that provides both security and flexibility, with KMS providing secure key management and encryption.
Community Discussion
No community discussion yet for this question.