AWS Certified Developer Associate DVA-C02 Practice Question
A development team must secure sensitive customer files in cloud-based object storage. The requirements stipulate that the encryption keys used should be under the company's direct control, with an automated process for changing these keys periodically. Which service and configuration would best fulfill these criteria?
Engage a private certificate authority to apply server-side encryption policies to the cloud storage
Enable a managed key rotation service within the platform's cloud object storage
Adopt a hardware security module service for key storage and institute a manual rotation process
Use self-managed keys in Key Management Service set to automatically rotate for object storage server-side encryption
The appropriate service for the creation and administration of encryption keys in the cloud is Key Management Service (KMS), which provides options to both create your own encryption keys and configure them for automatic rotation. Utilizing KMS keys offers the capability to fulfill the need for encryption at rest within S3 while also adhering to the company's guidelines for regular key rotation. The reliance on the platform's own managed keys would preclude direct control and rotation management. Certificate Manager's primary use case involves issuing certificates for TLS, not storage encryption, while CloudHSM is tailored for specific compliance requirements and does not innately manage automatic key rotation.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the Key Management Service (KMS)?
Open an interactive chat with Bash
How does automatic key rotation work in KMS?
Open an interactive chat with Bash
Why is AWS Certificate Manager (ACM) not suitable for this use case?
Open an interactive chat with Bash
AWS Certified Developer Associate DVA-C02
Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .