Amazon Web Services AWS Certified Security - Specialty SCS-C02 Question # 36 Topic 4 Discussion

Amazon Web Services AWS Certified Security - Specialty SCS-C02 Question # 36 Topic 4 Discussion

SCS-C02 Exam Topic 4 Question 36 Discussion:
Question #: 36
Topic #: 4

A company has an encrypted Amazon Aurora DB cluster in the us-east-1 Region. The DB cluster is encrypted with an AWS Key Management Service (AWS KMS) customer managed key. To meet compliance requirements, the company needs to copy a DB snapshot to the us-west-1 Region. However, when the company tries to copy the snapshot to us-west-1 the company cannot access the key that was used to encrypt the original database.

What should the company do to set up the snapshot in us-west-1 with proper encryption?


A.

Use AWS Secrets Manager to store the customer managed key in us-west-1 as a secret Use this secret to encrypt the snapshot in us-west-1.


B.

Create a new customer managed key in us-west-1. Use this new key to encrypt the snapshot in us-west-1.


C.

Create an IAM policy that allows access to the customer managed key in us-east-1. Specify am aws kms us-west-1 " as the principal.


D.

Create an IAM policy that allows access to the customer managed key in us-east-1. Specify arn aws rds us-west-1. * as the principal.


Get Premium SCS-C02 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.