A company currently stores symmetric encryption keys in a hardware security module (HSM). A solutions architect must design a solution to migrate key management to AWS. The solution should allow for key rotation and support the use of customer provided keys. Where should the key material be stored to meet these requirements?

Question

Quizplus · Accepted Answer

AWS Key Management Service (AWS KMS) is designed for managing cryptographic keys, supports key rotation, and allows for the use of customer provided keys.

A Company Currently Stores Symmetric Encryption Keys in a Hardware