Study. uk . com
  1. Home
  2. All questions
  3. Question 61

AWS Certified Solutions Architect study material · question 61 of 500

Which two statements about KMS grants are correct? Choose two.

  1. Each grant covers exactly one KMS key
  2. A grant can name both a grantee principal and a grantee service principal
  3. A grant replaces the key policy while it is active
  4. A grant allows access but can never deny it
Show the answer

Answer: D. A grant allows access but can never deny it
A. Each grant covers exactly one KMS key

Grants are allow-only and single-key. A grant names either a grantee principal or a grantee service principal, never both.

Source: Grants in AWS KMS (Amazon Web Services) — Grants in AWS KMS

Challenge yourself on this topic → Study as cards