A company wants to migrate a workload to AWS. The chief information security officer requires that all data be encrypted at rest when stored in the cloud. The company wants complete control of encryption key lifecycle management. The company must be able to immediately remove the key material and audit key usage independently of AWS CloudTrail. The chosen services should integrate with other storage services that will be used on AWS. Which services satisfies these security requirements?

Question

Quizplus · Accepted Answer

AWS CloudHSM allows the company to have complete control over the encryption key lifecycle management, including the ability to immediately remove key material. It also provides independent auditing capabilities and integrates with other AWS storage services.

A Company Wants to Migrate a Workload to AWS