Study. uk . com
  1. Home
  2. All questions
  3. Question 24

AWS Certified Solutions Architect study material · question 24 of 500

A team wants encryption at rest with no key to manage, no charge for the key, and easy sharing of encrypted data across accounts. Which KMS key type fits?

  1. An AWS owned key
  2. A customer managed key
  3. An AWS managed key
  4. An imported key in a custom key store
Show the answer

Answer: A. An AWS owned key

AWS owned keys are free, invisible to the customer, and make cross-account or cross-Region sharing simple because key permissions never arise.

Source: AWS KMS keys (Amazon Web Services) — AWS KMS keys

Challenge yourself on this topic → Study as cards