A Company Has Multiple Business Units

question 694

Multiple Choice

A company has multiple business units. Each business unit has its own AWS account and runs a single website within that account. The company also has a single logging account. Logs from each business unit website are aggregated into a single Amazon S3 bucket in the logging account. The S3 bucket policy provides each business unit with access to write data into the bucket and requires data to be encrypted. The company needs to encrypt logs uploaded into the bucket using a single AWS Key Management Service (AWS KMS) CMK. The CMK that protects the data must be rotated once every 365 days. Which strategy is the MOST operationally efficient for the company to use to meet these requirements?

• A) Create a customer managed CMK in the logging account. Update the CMK key policy to provide access to the logging account only. Manually rotate the CMK every 365 days.
• B) Create a customer managed CMK in the logging account. Update the CMK key policy to provide access to the logging account and business unit accounts. Enable automatic rotation of the CMK.
• C) Use an AWS managed CMK in the logging account. Update the CMK key policy to provide access to the logging account and business unit accounts. Manually rotate the CMK every 365 days.
• D) Use an AWS managed CMK in the logging account. Update the CMK key policy to provide access to the logging account only. Enable automatic rotation of the CMK.

---

Definitions:

Direct Negative-No

A straightforward or unambiguous refusal or rejection, often used in the context of sales or negotiations.

Introductory Approach

The initial method or strategy a salesperson uses to engage with a potential client, setting the tone for the sales interaction.

Mildew-Proof Shower Curtains

Shower curtains treated or manufactured with materials that resist the growth of mildew, enhancing durability and hygiene.

Secure Local Area Network

A computer network within a limited area that implements measures to protect data and resources from unauthorized access.