Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Associate · AWS
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
AWS KMS customer managed key with automatic rotation enabled + S3 default encryption meets every requirement with minimal operational overhead.
Per ChatGPT: Why B is correct The requirements are: Data must be encrypted in S3. The encryption key must be automatically rotated every year. Least operational overhead. AWS KMS customer managed keys support automatic key rotation, and AWS KMS can rotate the key annually without manual intervention. You can configure the S3 bucket to use this KMS key for default encryption (SSE-KMS). [repost.aws], [docs.aws.amazon.com] This solution: Encrypts the data at rest in S3. Automatically rotates the encryption key annually. Requires minimal administration after setup.
With SSE-S3: - AWS manages the encryption keys. - AWS automatically rotates the keys. - No KMS key creation or management is required. - It provides the lowest operational overhead.