SAA-C03 · Question #203
A company hosts an application that processes highly sensitive customer transactions on AWS. The application uses Amazon RDS as its database. The company manages its own encryption keys to secure the
The correct answer is A. Set up automatic key rotation in AWS Key Management Service (AWS KMS) for the encryption. AWS KMS automatic key rotationis the simplest and most operationally efficient solution. Enabling automatic key rotation ensures that KMS automatically generates new key material for the key every year without requiring manual intervention. Option B: Configuring alerts to rotate
Question
A company hosts an application that processes highly sensitive customer transactions on AWS. The application uses Amazon RDS as its database. The company manages its own encryption keys to secure the data in Amazon RDS. The company needs to update the customer-managed encryption keys at least once each year. Which solution will meet these requirements with the LEAST operational overhead?
Options
- ASet up automatic key rotation in AWS Key Management Service (AWS KMS) for the encryption
- BConfigure AWS Key Management Service (AWS KMS) to alert the company to rotate the
- CSchedule an AWS Lambda function to rotate the encryption keys annually.
- DCreate an AWS CloudFormation stack to run an AWS Lambda function that deploys new
How the community answered
(20 responses)- A75% (15)
- B5% (1)
- C5% (1)
- D15% (3)
Explanation
AWS KMS automatic key rotationis the simplest and most operationally efficient solution. Enabling automatic key rotation ensures that KMS automatically generates new key material for the key every year without requiring manual intervention. Option B: Configuring alerts to rotate keys introduces operational overhead as the actual rotation must still be managed manually. Option C: Scheduling a Lambda function to rotate keys adds unnecessary complexity compared to enabling automatic key rotation. Option D: Using a CloudFormation stack to run a Lambda function for key rotation increases operational overhead and complexity unnecessarily.
Community Discussion
No community discussion yet for this question.