AWS Certified Solutions Architect - Associate
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
A company is setting up an Amazon EKS cluster for a digital media streaming app, using managed node groups with Amazon EBS for storage. They require data at rest encryption using a customer-managed AWS KMS key with minimal operational overhead. Which two actions meet this requirement?
A
Implement a Kubernetes plugin for data encryption with the customer-managed key.
B
Post-EKS creation, find EBS volumes and enable encryption with the customer-managed key.
C
Set EBS encryption as the default in the AWS Region, using the customer-managed key.
D
Create an EKS cluster with an IAM role allowing access to the customer-managed key.
E
Secure the customer-managed key as a Kubernetes secret for EBS volume encryption.