A Company Has an Application Workflow That Uses an AWS

question 451

Multiple Choice

A company has an application workflow that uses an AWS Lambda function to download and decrypt files from Amazon S3. These files are encrypted using AWS Key Management Service Customer Master Keys (AWS KMS CMKs) . A solutions architect needs to design a solution that will ensure the required permissions are set correctly. Which combination of actions accomplish this? (Choose two.)

• A) Attach the kms:decrypt permission to the Lambda function's resource policy.
• B) Grant the decrypt permission for the Lambda IAM role in the KMS key's policy.
• C) Grant the decrypt permission for the Lambda resource policy in the KMS key's policy.
• D) Create a new IAM policy with the kms:decrypt permission and attach the policy to the Lambda function.
• E) Create a new IAM role with the kms:decrypt permission and attach the execution role to the Lambda function.

---

Definitions:

Chapter 7 Bankruptcy

A process under U.S. bankruptcy law for liquidating a debtor's assets to pay off creditors before the debtor is relieved of their debts.

Note Payable

A written promise to pay a specific amount of money, either on demand or at a set future date, typically used in business to document debt agreements.

Debtor's Book Value

The value of all debts owed to a company, often reflecting the accounts receivable balance on the balance sheet.