Study. uk . com
  1. Home
  2. All questions
  3. Question 105

AWS Certified Solutions Architect study material · question 105 of 500

An administrator needs to withdraw everything a KMS grant allowed, without unpicking policy statements. What should they do?

  1. Rotate the key material
  2. Delete the key policy
  3. Disable the key for one hour
  4. Retire or revoke the grant
Show the answer

Answer: D. Retire or revoke the grant

Deleting a grant removes every permission it allowed at once, which is why grants suit temporary access.

Source: Grants in AWS KMS (Amazon Web Services) — Grants in AWS KMS

Challenge yourself on this topic → Study as cards