AWS Certified Developer - Associate
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
A developer is creating an application to retrieve and format sensitive data into a PDF, potentially over 1 MB, using AWS KMS for encryption. Which method should be used to encrypt the PDF with a symmetric customer-managed KMS key, ensuring it can be decrypted later?
A
Store the encrypted key from GenerateDataKey API for later decryption and use the provided plaintext key with a symmetric algorithm to encrypt the PDF.
B
Store the plaintext key from GenerateDataKey API for later decryption and use the encrypted key with a symmetric algorithm to encrypt the PDF.
C
Store the encrypted key from GenerateDataKey API for later decryption and use the plaintext key to encrypt the PDF via the KMS Encrypt API.
D
Store the plaintext key from GenerateDataKey API for later decryption and use the encrypted key to encrypt the PDF via the KMS Encrypt API.