Study. uk . com
  1. Home
  2. All questions
  3. Question 140

AWS Certified Solutions Architect study material · question 140 of 500

An architect must choose between a customer managed key and an AWS owned key. Which requirement points to the customer managed key?

  1. The team must control the key policy and audit every use of the key
  2. The team wants encryption with no key administration at all
  3. The team wants to avoid any key-related charges
  4. The team needs the simplest possible cross-Region data sharing
Show the answer

Answer: A. The team must control the key policy and audit every use of the key

Customer managed keys are the choice when control matters; AWS owned keys are the choice when convenience matters, and they cannot be audited.

Source: AWS KMS keys (Amazon Web Services) — AWS KMS keys

Challenge yourself on this topic → Study as cards