A Security Architect is evaluating managed solutions for storage of encryption keys. The requirements are: -Storage is accessible by using only VPCs. -Service has tamper-evident controls. -Access logging is enabled. -Storage has high availability. Which of the following services meets these requirements?

Question

Quizplus · Accepted Answer

AWS CloudHSM meets the requirements as it provides a managed hardware security module (HSM) that allows for secure key storage with tamper-evident controls, access logging, and high availability. It can be accessed from within a VPC.

A Security Architect Is Evaluating Managed Solutions for Storage of Encryption