Study. uk . com
  1. Home
  2. All questions
  3. Question 56

AWS Certified Solutions Architect study material · question 56 of 500

How does the scope of a KMS key policy differ from that of an IAM policy?

  1. A key policy is Regional and governs only the key in its own Region
  2. A key policy applies to every Region in the account
  3. A key policy applies across every account in the organization
  4. A key policy applies only while the key is being rotated
Show the answer

Answer: A. A key policy is Regional and governs only the key in its own Region

IAM policies are global, whereas a key policy controls access only to the KMS key sitting in the same Region.

Source: Key policies in AWS KMS (Amazon Web Services) — Key policies in AWS KMS

Challenge yourself on this topic → Study as cards