Answer-first summary for fast verification
Answer: 4KB
Overall explanation Correct option: 4 KB You can encrypt up to 4 kilobytes (4096 bytes) of arbitrary data such as an RSA key, a database password, or other sensitive information. While AWS KMS does support sending data up to 4 KB to be encrypted directly, envelope encryption can offer significant performance benefits. When you encrypt data directly with AWS KMS it must be transferred over the network. Envelope encryption reduces the network load since only the request and delivery of the much smaller data key go over the network. The data key is used locally in your application or encrypting AWS service, avoiding the need to send the entire block of data to AWS KMS and suffer network latency. Incorrect options: 1MB - For anything over 4 KB, you may want to look at envelope encryption 10MB - For anything over 4 KB, you may want to look at envelope encryption 16KB - For anything over 4 KB, you may want to look at envelope encryption
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
A developer working at a university is tasked with encrypting a large XML payload that will be transferred over the network using AWS Key Management Service (KMS). Before moving this application to production, the developer wants to conduct some tests. To proceed effectively with testing, the developer needs to know the maximum data size that AWS KMS supports for encryption.
What is the maximum data size supported by AWS KMS?
A
16KB
B
1MB
C
10MB
D
4KB