A company needs to encrypt data at rest, but it wants to leverage an AWS managed service using its own master key. Which of the following AWS service can be used to meet these requirements?
A) SSE with Amazon S3
B) SSE with AWS KMS
C) Client-side encryption
D) AWS IAM roles and policies

Question

Quizplus · Accepted Answer

AWS KMS (Key Management Service) allows you to use your own master key for encryption, providing a managed service for encrypting data at rest.

A Company Needs to Encrypt Data at Rest, but It