An Amazon EC2 Instance Is Denied Access to a Newly

question 271

Multiple Choice

An Amazon EC2 instance is denied access to a newly created AWS KMS CMK used for decrypt actions. The environment has the following configuration: The instance is allowed the kms:Decrypt action in its IAM role for all resources The AWS KMS CMK status is set to enabled The instance can communicate with the KMS API using a configured VPC endpoint What is causing the issue?

• A) The kms:GenerateDataKey permission is missing from the EC2 instance's IAM role
• B) The ARN tag on the CMK contains the EC2 instance's ID instead of the instance's ARN
• C) The kms:Encrypt permission is missing from the EC2 IAM role
• D) The KMS CMK key policy that enables IAM user permissions is missing

---

Definitions:

Database Information

Information that is organized in a structured way, making it accessible and manageable through a database management system.

Privacy

The condition of being free from unauthorized intrusion or disclosure, especially with respect to personal information.

Revenue Streams

The various sources from which a business earns money.

Loss-Leader Pricing

A pricing strategy where a product is sold at a price below its market cost to stimulate other profitable sales.