SAP-C02 Question 63
Select 2Your organization requires a secure method to manage SSL/TLS certificates for its web applications and ensure automatic certificate renewal. Additionally, you need to control access to encryption keys that protect sensitive data stored in S3 buckets. Which combination of AWS services should you use to meet these requirements?
- A
AWS Certificate Manager (ACM) for managing SSL/TLS certificates and AWS Key Management Service (KMS) for encryption key management
- B
AWS Identity and Access Management (IAM) for managing SSL/TLS certificates and AWS KMS for encryption key management
- C
Amazon CloudFront for managing SSL/TLS certificates and AWS KMS for encryption key management
- D
AWS Certificate Manager (ACM) for managing SSL/TLS certificates and AWS Secrets Manager for encryption key management
- E
AWS Certificate Manager (ACM) for managing SSL/TLS certificates and enabling automatic renewal
Show answer and explanation
Correct answers: A, E
Explanation
To meet the requirements for managing SSL/TLS certificates with automatic renewal, AWS Certificate Manager (ACM) should be used. For encryption key management, AWS Key Management Service (KMS) is the appropriate choice as it provides centralized control over encryption keys and integrates with other AWS services like S3. The combination of ACM and KMS ensures secure and efficient management of certificates and encryption keys.
- A. Correct.
Correct. AWS Certificate Manager (ACM) is specifically designed for managing SSL/TLS certificates, including automatic renewal, and AWS Key Management Service (KMS) is the appropriate service for managing encryption keys securely.
- B. Incorrect.
Incorrect. IAM is used to manage access to AWS resources, but it is not designed for managing SSL/TLS certificates.
- C. Incorrect.
Incorrect. Amazon CloudFront can distribute content securely with SSL/TLS certificates, but it doesn’t manage certificates directly or handle encryption key management.
- D. Incorrect.
Incorrect. AWS Secrets Manager is used for managing secrets like database credentials, not encryption keys or SSL/TLS certificates.
- E. Correct.
Correct. AWS Certificate Manager (ACM) simplifies the management of SSL/TLS certificates, including provisioning and automatic renewal.