A company plans to rehost an application to Amazon EC2 instances that use Amazon Elastic Block Store (Amazon EBS) as the attached storage. A solutions architect must design a solution to ensure that a

Question

Options

• AConfigure the EC2 account attributes to always encrypt new EBS volumes.
• BUse AWS Config. Configure the encrypted-volumes identifier Apply the default AWS Key
• CConfigure AWS Systems Manager to create encrypted copies of the EBS volumes. Reconfigure
• DCreate a customer managed key in AWS Key Management Service (AWS KMS) Configure AWS

• A
  88% (35)
• B
  3% (1)
• C
  8% (3)
• D
  3% (1)

Explanation

EC2 Account Attributes: Amazon EC2 allows you to set account attributes to automatically encrypt new EBS volumes. This ensures that all new volumes created in your account are encrypted by default. Configuration Steps: Go to the EC2 Dashboard. Select "Account Attributes" and then "EBS encryption". Enable default EBS encryption and select the default AWS KMS key or a customer-managed key. Prevention of Unencrypted Volumes: By setting this account attribute, you ensure that it is not possible to create unencrypted EBS volumes, thereby enforcing compliance with security Operational Efficiency: This solution requires minimal configuration changes and provides automatic enforcement of encryption policies, reducing operational overhead.

No community discussion yet for this question.