AWS SAP-C02 · Question 08 · Domain 2.3: Security Controls
An application stores sensitive PII in Amazon S3. Compliance requires that data is encrypted at rest using keys managed by the company, and the encryption keys must be rotated annually automatically. Which encryption strategy meets these requirements?
Answer options:
Server-Side Encryption with Amazon S3 Managed Keys (SSE-S3).
Server-Side Encryption with AWS KMS Customer Managed Keys (SSE-KMS) with automatic key rotation enabled.
Client-Side Encryption using AWS KMS.
Server-Side Encryption with AWS KMS AWS Managed Keys.
75 questions · hints · full answers · grading
Expert