DVA-C02 · Question #577
A developer is building an application that uses an Amazon RDS for PostgreSQL database. To meet security requirements, the developer needs to ensure that data is encrypted at rest. The developer…
The correct answer is B. Create a symmetric customer managed AWS KMS key. Use the key to encrypt the database. A customer-managed AWS Key Management Service (KMS) key allows for encryption at rest and provides the ability to rotate the key on demand. This ensures compliance with security requirements for key management and database encryption. RDS integrates natively with AWS KMS…
Question
A developer is building an application that uses an Amazon RDS for PostgreSQL database. To meet security requirements, the developer needs to ensure that data is encrypted at rest. The developer must be able to rotate the encryption keys on demand. Which solution will meet these requirements?
Options
- AUse an AWS KMS managed encryption key to encrypt the database.
- BCreate a symmetric customer managed AWS KMS key. Use the key to encrypt the database.
- CCreate a 256-bit AES-GCM encryption key. Store the key in AWS Secrets Manager, and enable
- DCreate a 256-bit AES-GCM encryption key. Store the key in AWS Secrets Manager. Configure an
How the community answered
(62 responses)- A3% (2)
- B85% (53)
- C3% (2)
- D8% (5)
Explanation
A customer-managed AWS Key Management Service (KMS) key allows for encryption at rest and provides the ability to rotate the key on demand. This ensures compliance with security requirements for key management and database encryption. RDS integrates natively with AWS KMS, allowing the use of a customer-managed key for encrypting data at rest. Key rotation can be managed directly in AWS KMS without needing custom solutions.
Community Discussion
No community discussion yet for this question.