CloudGuild · Blog · Cheat sheets · Lessons · Certifications
Navigating AWS Security: Choosing the Right Service for Sensitive Data
Learn to tackle AWS exam questions about securing sensitive data with effective encryption and access control.
Storing sensitive customer data while ensuring compliance can be challenging. Candidates often trip over the nuances of AWS services that provide encryption and access control. Let's clarify this with a specific exam question.
The question
A financial services company wants to store sensitive customer data and ensure compliance with regulations. They need a solution that provides strong encryption and access control. Which AWS service should they choose?
A. Amazon S3 with server-side encryption
B. Amazon RDS with encryption at rest
C. AWS Secrets Manager
D. Amazon Redshift with encryption
Think before you scroll
Consider the specific needs of the financial services company: strong encryption and access control for sensitive data. Each option addresses security, but only one aligns best with the structured data needs typical in financial services.
The answer
The correct option is B. Amazon RDS with encryption at rest. RDS is designed for structured data and transactional workloads, providing strong access control and encryption features that meet compliance requirements for sensitive customer data.
Why the other options lose
- A. Amazon S3 with server-side encryption: While S3 supports encryption, it is primarily optimized for unstructured data and object storage. RDS is a better fit for structured data, especially in financial applications.
- C. AWS Secrets Manager: This service is designed for managing and retrieving secrets, such as API keys and database credentials. It does not serve as a primary storage solution for sensitive customer data, making it less suitable for this scenario.
- D. Amazon Redshift with encryption: While Redshift provides encryption, it is mainly a data warehouse service. It is not optimized for transactional data and compliance needs typical in financial services, which require a more structured approach like that of RDS.
The concept behind it
To effectively manage sensitive data, prioritize services that provide encryption at rest and strong access control mechanisms. RDS excels in this area, specifically designed for structured data and transactional workloads, which is crucial for compliance in financial services.
Exam trap to remember
When faced with compliance and encryption questions, remember: RDS is your go-to for structured data in regulated environments.