A company requires all data that is stored in Amazon DynamoDB tables to be encrypted at rest with keys that are managed by the company. How can a developer meet these requirements WITHOUT changing the application?
A) Use the AWS Encryption SDK to encrypt items before insertion.
B) Enable table-level encryption with an AWS managed customer master key (CMK).
C) Use AWS Certificate Manager (ACM) to create one certificate for each DynamoDB table.
D) Import key material in DynamoDB, and enable table-level encryption.

Question

Quizplus · Accepted Answer

Enabling table-level encryption with an AWS managed customer master key (CMK) allows the company to manage the keys without changing the application, as DynamoDB handles encryption and decryption transparently.

A Company Requires All Data That Is Stored in Amazon