Amazon Exam SCS-C02 Topic 2 Question 16 Discussion

Actual exam question for Amazon's SCS-C02 exam

Question #: 16
Topic #: 2

A company stores sensitive documents in Amazon S3 by using server-side encryption with an IAM Key Management Service (IAM KMS) CMK. A new requirement mandates that the CMK that is used for these documents can be used only for S3 actions.

Which statement should the company add to the key policy to meet this requirement?

AOption A

BOption B

Show Suggested Answer

Suggested Answer: D

To ensure minimal latency and regional availability of secrets, encrypting secrets in us-east-1 with a customer-managed KMS key and then replicating them to us-west-1 for encryption with the same key is the optimal approach. This method leverages customer-managed KMS keys for enhanced control and ensures that secrets are available in both regions, adhering to disaster recovery principles and minimizing latency by using regional endpoints.

by Lindsay at Apr 24, 2024, 12:33 PM

Limited Time Offer

25%

27 days ago

I think the company should add statement A to the key policy.

upvoted 0 times

...