A user has enabled versioning on an S3 bucket. The user is using server side encryption for data at rest. If the user is supplying his own keys for encryption (SSE-C), what is recommended to the user for the purpose of security?
A) The user should not use his own security key as it is not secure
B) Configure S3 to rotate the user's encryption key at regular intervals
C) Configure S3 to store the user's keys securely with SSL
D) Keep rotating the encryption key manually at the client side

Question

Quizplus · Accepted Answer

It is recommended that the user manually rotates their encryption keys regularly to enhance security when using SSE-C, as AWS does not manage key rotation for customer-provided keys.

A User Has Enabled Versioning on an S3 Bucket