SAA-C03 · Question #39
A company runs an environment where data is stored in an Amazon S3 bucket. The objects are accessed frequently throughout the day. The company has strict data encryption requirements fordata that is s
The correct answer is B. Use an S3 Bucket Key for server-side encryption with AWS KMS keys (SSE-KMS) on the new. An S3 Bucket Key reduces the cost of using AWS KMS for server-side encryption by decreasing the number of requests made to KMS. By enabling S3 Bucket Key, the company can meet its encryption requirements with KMS keys while optimizing costs by reducing the number of KMS Key AWS f
Question
A company runs an environment where data is stored in an Amazon S3 bucket. The objects are accessed frequently throughout the day. The company has strict data encryption requirements fordata that is stored in the S3 bucket. The company currently uses AWS Key Management Service (AWS KMS) for encryption. The company wants to optimize costs associated with encrypting S3 objects without making additional calls to AWS KMS. Which solution will meet these requirements?
Options
- AUse server-side encryption with Amazon S3 managed keys (SSE-S3).
- BUse an S3 Bucket Key for server-side encryption with AWS KMS keys (SSE-KMS) on the new
- CUse client-side encryption with AWS KMS customer managed keys.
- DUse server-side encryption with customer-provided keys (SSE-C) stored in AWS KMS.
How the community answered
(23 responses)- A17% (4)
- B70% (16)
- C9% (2)
- D4% (1)
Explanation
An S3 Bucket Key reduces the cost of using AWS KMS for server-side encryption by decreasing the number of requests made to KMS. By enabling S3 Bucket Key, the company can meet its encryption requirements with KMS keys while optimizing costs by reducing the number of KMS Key AWS features: Cost Optimization: S3 Bucket Keys reduce the frequency of KMS calls, optimizing the cost associated with encryption while still using AWS KMS for key management. Compliance with KMS Encryption: This solution continues to meet the strict encryption requirements of the company by using KMS managed keys. AWS Documentation: Using an S3 Bucket Key is recommended for organizations looking to optimize encryption costs without compromising security.
Community Discussion
No community discussion yet for this question.