You need to have a requirement to store objects in an S3 bucket with a key that is automatically managed and rotated. Which of the following can be used for this purpose?

Question

Options

• AAWS KMS
• BAWS S3 Server side encryption
• CAWS Customer Keys
• DAWS Cloud HSM

• A
  10% (4)
• B
  82% (32)
• C
  5% (2)
• D
  3% (1)

Explanation

The AWS Documentation mentions the following Server-side encryption protects data at rest. Server-side encryption with Amazon S3- managed encryption keys (SSE-S3) uses strong multi- factor encryption. Amazon S3 encrypts each object with a unique key. As an additional safeguard, it encrypts the key itself with a master key that it rotates regularly. Amazon S3 server-side encryption uses one of the strongest block ciphers available, 256-bit Advanced Encryption Standard (AES- 256), to encrypt your data. All other options are invalid since here you need to ensure the keys are manually rotated since you manage the entire key set Using AWS S3 Server side encryption, AWS will manage the rotation of keys https://docs.aws.amazon.com/AmazonS3/latest/dev/UsineServerSideEncryption.html

No community discussion yet for this question.