A Security Engineer Has Discovered That, Although Encryption Was Enabled

question 43

Multiple Choice

A Security Engineer has discovered that, although encryption was enabled on the Amazon S3 bucket examplebucket, anyone who has access to the bucket has the ability to retrieve the files. The Engineer wants to limit access to each IAM user can access an assigned folder only. What should the Security Engineer do to achieve this?

• A) Use envelope encryption with the AWS-managed CMK aws/s3.
• B) Create a customer-managed CMK with a key policy granting "kms:Decrypt" based on the "${aws:username}" variable.
• C) Create a customer-managed CMK for each user. Add each user as a key user in their corresponding key policy.
• D) Change the applicable IAM policy to grant S3 access to "Resource": "arn:aws:s3:::examplebucket/${aws:username}/*"

---

Definitions:

Fat Cells

Also known as adipocytes, these are cells that store energy in the form of fat and regulate metabolism.

Weight and Body Composition

The total mass of an individual, combined with the distribution of muscle, fat, and bone within the body.

Disorder of Written Expression

A learning disability characterized by significant impairment in the ability to write, despite normal intelligence.

Expressive Language Disorder

A communication disorder characterized by difficulties in expressing oneself verbally, impacting the ability to convey messages effectively.