Study. uk . com
  1. Home
  2. All questions
  3. Question 95

AWS Certified Solutions Architect study material · question 95 of 500

A team wants to share EBS volumes encrypted under an AWS managed key with another AWS account. What blocks them?

  1. The key must be rotated before sharing is allowed
  2. Data encrypted under an AWS managed key cannot be shared across accounts
  3. AWS managed keys cannot be used for EBS at all
  4. The key policy must first be edited to add the other account
Show the answer

Answer: B. Data encrypted under an AWS managed key cannot be shared across accounts

An AWS managed key works only within its own service and account, so resources encrypted with it cannot be shared with another account.

Source: AWS KMS keys (Amazon Web Services) — AWS KMS keys

Challenge yourself on this topic → Study as cards