A Developer decides to store highly secure data in Amazon S3 and wants to implement server-side encryption (SSE) with granular control of who can access the master key. Company policy requires that the master key be created, rotated, and disabled easily when needed, all for security reasons. Which solution should be used to meet these requirements?
A) SSE with Amazon S3 managed keys (SSE-S3)
B) SSE with AWS KMS managed keys (SSE-KMS)
C) SSE with AWS Secrets Manager
D) SSE with customer-provided encryption keys

Question

Quizplus · Accepted Answer

SSE with AWS KMS managed keys (SSE-KMS) allows for granular control over the master key, including creation, rotation, and disabling, meeting the company's security policy requirements.

A Developer Decides to Store Highly Secure Data in Amazon