CLF-C02 Question 76
Single answerA company is planning to migrate its applications to AWS and is concerned about meeting compliance requirements for sensitive data storage. Which AWS service can help the company manage encryption keys to ensure data security and compliance?
- A
Amazon S3
- B
AWS Key Management Service (AWS KMS)
- C
AWS Identity and Access Management (IAM)
- D
AWS Config
Show answer and explanation
Correct answer: B
Explanation
AWS KMS is a centralized service for managing encryption keys, ensuring secure storage of sensitive data and helping businesses meet compliance requirements. While other services like Amazon S3 support encryption, they rely on AWS KMS to handle key management.
- A. Incorrect.
Amazon S3 is a storage service that provides features for data encryption, but it is not primarily responsible for managing encryption keys.
- B. Correct.
AWS Key Management Service (AWS KMS) is specifically designed to create, manage, and control encryption keys, making it suitable for securing sensitive data and meeting compliance requirements.
- C. Incorrect.
AWS Identity and Access Management (IAM) is used to manage user access and permissions, but it does not handle encryption key management.
- D. Incorrect.
AWS Config is a service for tracking resource configurations over time and auditing compliance, but it does not manage encryption keys.