Explanation:
AWS Key Management Service (KMS) allows you to encrypt data at rest using encryption keys that you manage. It can be used to encrypt data stored in Amazon Elasticsearch Service domains.
You want to protect sensitive data stored in Amazon Elasticsearch Service domains at rest. Which encryption option should you choose?
A
AWS Certificate Manager (ACM)
B
AWS Key Management Service (KMS)
C
AWS Secrets Manager
D
AWS CloudHSM
No comments yet.