- Home
- All questions
- Question 24
AWS Certified Solutions Architect study material · question 24 of 500
A team wants encryption at rest with no key to manage, no charge for the key, and easy sharing of encrypted data across accounts. Which KMS key type fits?
Show the answer
Answer: A. An AWS owned key
AWS owned keys are free, invisible to the customer, and make cross-account or cross-Region sharing simple because key permissions never arise.
Source: AWS KMS keys (Amazon Web Services) — AWS KMS keys