A company is preparing to store confidential data in Amazon S3. For compliance reasons, the data must be encrypted at rest. Encryption key usage must be logged for auditing purposes. Keys must be rotated every year. Which solution meets these requirements and is the MOST operationally efficient?

Question

Quizplus · Accepted Answer

AWS KMS (SSE-KMS) with automatic rotation provides encryption at rest, logs key usage for auditing, and automatically rotates keys annually, ensuring compliance and operational efficiency.

A Company Is Preparing to Store Confidential Data in Amazon