- Home
- All questions
- Question 61
AWS Certified Solutions Architect study material · question 61 of 500
Which two statements about KMS grants are correct? Choose two.
Show the answer
Answer: D. A grant allows access but can never deny it
A. Each grant covers exactly one KMS key
Grants are allow-only and single-key. A grant names either a grantee principal or a grantee service principal, never both.
Source: Grants in AWS KMS (Amazon Web Services) — Grants in AWS KMS