Study. uk . com
  1. Home
  2. All questions
  3. Question 62

AWS Certified Solutions Architect study material · question 62 of 500

An application creates a KMS grant and immediately needs its permissions. What makes them usable at once?

  1. Attaching the grant to the key policy
  2. Calling the operation from the account root user
  3. Using the grant token returned by CreateGrant
  4. Waiting for the key to be rotated
Show the answer

Answer: C. Using the grant token returned by CreateGrant

The KMS API is eventually consistent, so a new grant may take a moment to propagate; a grant token makes its permissions effective immediately.

Source: Grants in AWS KMS (Amazon Web Services) — Grants in AWS KMS

Challenge yourself on this topic → Study as cards