A company is planning to migrate customer records to an Amazon S3 bucket. The company needs to ensure that customer records are protected against unauthorized access and are encrypted in transit and…

Question

Options

• AUse AWS Key Management Service (AWS KMS) to encrypt customer records at rest. Create an
• BUse AWS Nitro Enclaves to encrypt customer records at rest. Use AWS Key Management
• CUse AWS Key Management Service (AWS KMS) to encrypt customer records at rest. Create an
• DUse server-side encryption with Amazon S3 managed keys (SSE-S3) with default settings to

• A
  79% (23)
• B
  7% (2)
• C
  3% (1)
• D
  10% (3)

Explanation

Encryption at Rest: AWS Key Management Service (AWS KMS) provides centralized control over the cryptographic keys used to protect data. By using AWS KMS with Amazon S3, you can manage encryption keys and define policies to control access to them. Encryption in Transit: By enforcing the aws: SecureTransport condition in the S3 bucket policy, you ensure that all data is transmitted over HTTPS, protecting data in transit. Access Control: IAM policies allow you to define fine-grained permissions for users and roles, ensuring that only authorized entities can access the customer records. Monitoring: AWS CloudTrail provides a record of actions taken by a user, role, or AWS service in Amazon S3, enabling you to monitor access to the records.

No community discussion yet for this question.