A company stores documents in Amazon S3 with default settings A new regulation requires the company to encrypt the documents at rest, rotate the encryption keys annually, and keep a record of when the encryption keys were rotated.
The company does not want to manage the encryption keys outside of AWS Which solution will meet these requirements?

Question

A company stores documents in Amazon S3 with default settings A new regulation requires the company to encrypt the documents at rest, rotate the encryption keys annually, and keep a record of when the encryption keys were rotated.

The company does not want to manage the encryption keys outside of AWS Which solution will meet these requirements?

Steven Henkel · Accepted Answer

Use server-side encryption with customer-provided encryption keys (SSE-C)

Steven Henkel · Answer

Use server-side encryption with Amazon S3 managed encryption keys (SSE-S3).

Steven Henkel · Answer

Use server-side encryption with AWS KMS managed encryption keys (SSE-KMS)

Steven Henkel · Answer

Use client-side encryption before sending the data to Amazon S3

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(1)

Related questions

Question 560 - CLF-C01 discussion

Suggested answer: C

0 comments