List of questions
Related questions
Question 254 - DVA-C02 discussion
A company is building an application to accept data from customers. The data must be encrypted at rest and in transit.
The application uses an Amazon API Gateway API that resolves to AWS Lambda functions. The Lambda functions store the data in an Amazon Aurora MySQL DB cluster. The application worked properly during testing.
A developer configured an Amazon CloudFront distribution with field-level encryption that uses an AWS Key Management Service (AWS KMS) key. After the configuration of the distribution, the application behaved unexpectedly. All the data in the database changed from plaintext to ciphertext.
The developer must ensure that the data is not stored in the database as the ciphertext from the CloudFront field-level encryption.
Which solution will meet this requirement?
Change the CloudFront Viewer protocol policy from 'HTTP and HTTPS' to 'HTTPS only.'
Add a Lambda function that uses the KMS key to decrypt the data fields before saving the data to the database.
Enable encryption on the DB cluster by using the same KMS key that is used in CloudFront.
Request and deploy a new SSL certificate to use with the CloudFront distribution.
0 comments
Leave a comment first