AWS Certified Security - Specialty
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
A company is utilizing AWS Key Management Service (AWS KMS) for data-at-rest encryption and requires client-side encryption for its projects. Due to increased testing of AWS KMS usage across multiple projects, there has been a significant surge in AWS resource consumption, with applications issuing frequent encryption requests to KMS endpoints. The company seeks a solution that ensures unthrottled AWS KMS usage, enhances key management for client-side encryption, and is cost-effective. Which solution meets these criteria?
A
Use keyrings with the AWS Encryption SDK. Use each keyring individually or combine keyrings into a multi-keyring. Decrypt the data by using a keyring that has the primary key in the multi-keyring.
B
Use data key caching. Use the local cache that the AWS Encryption SDK provides with a caching cryptographic materials manager.
C
Use KMS key rotation. Use a local cache in the AWS Encryption SDK with a caching cryptographic materials manager.
D
Use keyrings with the AWS Encryption SDK. Use each keyring individually or combine keyrings into a multi-keyring. Use any of the wrapping keys in the multi-keyring to decrypt the data.