A Developer Who Is Following AWS Best Practices for Secure

question 280

Multiple Choice

A Developer who is following AWS best practices for secure code development requires an application to encrypt sensitive data to be stored at rest, locally in the application, using AWS KMS. What is the simplest and MOST secure way to decrypt this data when required?

• A) Request KMS to provide the stored unencrypted data key and then use the retrieved data key to decrypt the data.
• B) Keep the plaintext data key stored in Amazon DynamoDB protected with IAM policies. Query DynamoDB to retrieve the data key to decrypt the data
• C) Use the Encrypt API to store an encrypted version of the data key with another customer managed key. Decrypt the data key and use it to decrypt the data when required.
• D) Store the encrypted data key alongside the encrypted data. Use the Decrypt API to retrieve the data key to decrypt the data when required.

---

Definitions:

Optimal Solution

Refers to the most efficient, effective, or achievable outcome or answer to a problem within a given set of constraints.

13-Inch Rolls

13-Inch Rolls refer to rolls of material, such as paper or film, that are thirteen inches wide, commonly used in printing and packaging industries.

Produced

The process of creating or manufacturing goods and services, often involving raw materials or components in industrial or economic contexts.

Cutting Pattern

The designed arrangement for cutting material such as fabric, metal, or paper, to minimize waste and maximize efficiency.