AWS Certified Solutions Architect - Associate
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
How should a solutions architect securely share an EBS-backed, KMS-encrypted Amazon Machine Image (AMI) with an AWS Managed Service Provider (MSP) Partner's AWS account during an application migration initiative?
A
By making the AMI and snapshots public and updating the key policy for the MSP Partner's access.
B
By adjusting the AMI's launch permissions and key policy to allow only the MSP Partner's AWS account to use the image and key.
C
By changing launch permissions and key policy to trust a new KMS key owned by the MSP Partner for encryption.
D
By exporting the AMI to an S3 bucket in the MSP Partner's account, encrypting it with a new key owned by the MSP Partner, and then copying and launching it there.