A company is planning to use Amazon S3 to store images uploaded by its users. The images must be encrypted at rest in Amazon S3. The company does not want to spend time managing and rotating the keys, but it does want to control who can access those keys. What should a solutions architect use to accomplish this?

Question

Quizplus · Accepted Answer

Server-Side Encryption with AWS KMS-Managed Keys (SSE-KMS) allows the company to control access to the keys through AWS IAM policies without managing the keys themselves, as AWS handles key management and rotation.

A Company Is Planning to Use Amazon S3 to Store