AWS Certified Cloud Practitioner
Get started today
Ultimate access to all questions.
Deep dive into the quiz with AI chat providers.
We prepare a focused prompt with your quiz and certificate details so each AI can offer a more tailored, in-depth explanation.
A company is using custom models in Amazon Bedrock for a generative AI application. The company wants to use a company-managed encryption key to encrypt the model artifacts that the model customization jobs create. Which AWS service meets these requirements?
Exam-Like
Community
RRitesh
A
AWS Key Management Service (AWS KMS)
B
Amazon Inspector
C
Amazon Macie
D
AWS Secrets Manager
Explanation:
Explanation
AWS Key Management Service (AWS KMS) is the correct service for managing encryption keys in AWS. Here's why:
Why AWS KMS is correct:
- Purpose-built for key management: AWS KMS is specifically designed to create and control encryption keys used to encrypt data across AWS services.
- Integration with Amazon Bedrock: Amazon Bedrock supports using AWS KMS keys to encrypt model artifacts and other data.
- Company-managed keys: AWS KMS allows you to create and manage your own encryption keys (Customer Managed Keys - CMKs) rather than using AWS-managed keys.
- Granular control: With AWS KMS, you can define key policies, rotation schedules, and access controls for your encryption keys.
Why other options are incorrect:
- B. Amazon Inspector: This is an automated security assessment service that helps improve security and compliance of applications deployed on AWS. It doesn't manage encryption keys.
- C. Amazon Macie: This is a security service that uses machine learning to discover, classify, and protect sensitive data in AWS. It's not designed for encryption key management.
- D. AWS Secrets Manager: This service helps protect secrets needed to access applications, services, and IT resources. While it can store and manage secrets, it's not designed for managing encryption keys for data encryption at rest.
Key AWS KMS features relevant to this scenario:
- Create Customer Managed Keys (CMKs)
- Define key policies and access controls
- Enable automatic key rotation
- Audit key usage via AWS CloudTrail
- Integrate with various AWS services including Amazon Bedrock
When customizing models in Amazon Bedrock, you can specify a KMS key to encrypt the model artifacts, ensuring that your company maintains control over the encryption keys used to protect your intellectual property.
Comments
Loading comments...