SAA-C03 · Question #462
A company needs a data encryption solution for a machine learning (ML) process. The solution must use an AWS managed service. The ML process currently reads a large number of objects in Amazon S3 that
Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #462. The question stem and answer options stay visible for context.
Question
A company needs a data encryption solution for a machine learning (ML) process. The solution must use an AWS managed service. The ML process currently reads a large number of objects in Amazon S3 that are encrypted by a customer managed AWS KMS key. The current process incurs significant costs because of excessive calls to AWS Key Management Service (AWS KMS) to decrypt S3 objects. The company wants to reduce the costs of API calls to decrypt S3 objects. Which solution will meet this requirement?
Options
- ASwitch from a customer managed KMS key to an AWS managed KMS key.
- BRemove the AWS KMS encryption from the S3 bucket. Use a bucket policy to encrypt the data
- CRecreate the KMS key in AWS CloudHSM.
- DUse S3 Bucket Keys to perform server-side encryption with AWS KMS keys (SSE-KMS) to
Unlock SAA-C03 to see the answer
You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.