A Security Engineer Is Working with the Development Team to Design

question 270

Multiple Choice

A Security Engineer is working with the development team to design a supply chain application that stores sensitive inventory data in an Amazon S3 bucket. The application will use an AWS KMS customer master key (CMK) to encrypt the data on Amazon S3. The inventory data on Amazon S3 will be shared of vendors. All vendors will use AWS principals from their own AWS accounts to access the data on Amazon S3. The vendor list may change weekly, and the solution must support cross-account access. What is the MOST efficient way to manage access control for the KMS CMK7?

• A) Use KMS grants to manage key access. Programmatically create and revoke grants to manage vendor access.
• B) Use an IAM role to manage key access. Programmatically update the IAM role policies to manage vendor access.
• C) Use KMS key policies to manage key access. Programmatically update the KMS key policies to manage vendor access.
• D) Use delegated access across AWS accounts by using IAM roles to manage key access. Programmatically update the IAM trust policy to manage cross-account vendor access.

---

Definitions:

Teen Pregnancy

Pregnancy occurring in young women under the age of 20, which carries unique health risks and socio-economic implications for the teen and her child.

Multiple Controls

In experimental research, refers to the use of two or more control groups to compare against the experimental group, enhancing the validity of the results.

Case-control Studies

Observational studies that compare individuals with a particular condition or disease (cases) to those without (controls) to identify risk factors.

Brain Tumors

Abnormal cell growths within the brain that can be benign (non-cancerous) or malignant (cancerous).