CloudGuild · Blog · Cheat sheets · Lessons · Certifications
Mastering Key Management: A Walkthrough of AWS SAA-C03 Encryption Question
Explore a key management question from the AWS SAA-C03 exam. Understand why AWS KMS is the best choice for managing encryption keys securely.
A common pitfall for candidates is distinguishing between services that manage encryption keys and those that handle data storage or access management. This question tests your understanding of AWS services focused specifically on encryption.
The question
A company wants to implement a secure web application that must comply with strict data protection regulations. They need to ensure that all sensitive data is encrypted both in transit and at rest. Which AWS service should they use to manage encryption keys securely?
- A. AWS IAM
- B. AWS KMS
- C. Amazon S3
- D. AWS Secrets Manager
Think before you scroll
Before you look at the answers, consider which service is designed specifically for managing encryption keys. Think about the functionalities of each option and what they are best suited for.
The answer
The correct option is B. AWS KMS. AWS Key Management Service is tailored for managing cryptographic keys. It provides the necessary tools to encrypt data both at rest and in transit, aligning perfectly with the requirements of the question.
Why the other options lose
- A. AWS IAM: This service is focused on identity and access management. While IAM controls who can access what, it does not manage encryption keys.
- C. Amazon S3: Although S3 can store encrypted data, it does not manage encryption keys itself. S3 relies on KMS or other tools for key management, making it an indirect solution.
- D. AWS Secrets Manager: This service helps manage sensitive information like API keys and passwords, not encryption keys. Its focus is on secrets management rather than encryption key management.
The concept behind it
Understanding the specific roles of AWS services is crucial. AWS KMS is essential for encryption key management. It is designed to provide secure key storage, management, and usage for encryption. Remember that while other services deal with data security, KMS directly addresses encryption key management.
Exam trap to remember
Remember, AWS KMS is your go-to service for managing encryption keys. If a question involves encryption management, lean towards KMS as the solution.