Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 510 discussion

Exam question from Amazon's AWS Certified Developer - Associate DVA-C02

Question #: 510
Topic #: 1

[All AWS Certified Developer - Associate DVA-C02 Questions]

An AWS Lambda function generates a 3 MB JSON file and then uploads it to an Amazon S3 bucket daily. The file contains sensitive information, so the developer must ensure that it is encrypted before uploading to the bucket.

Which of the following modifications should the developer make to ensure that the data is encrypted before uploading it to the bucket?

A. Use the default AWS Key Management Service (AWS KMS) key for Amazon S3 in the Lambda function code.
B. Use the S3 managed key and call the GenerateDataKey API to encrypt the file.
C. Use the GenerateDataKey API, then use that data key to encrypt the file in the Lambda function code.
D. Use an AWS Key Management Service (AWS KMS) customer managed key for Amazon S3 in the Lambda function code.

Show Suggested Answer

Suggested Answer: C 🗳️

by Dahlia9524 at Dec. 10, 2024, 5:52 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

ShakthiGCP

4 months, 1 week ago

Selected Answer: C

generating a data key, then enc # Generate a data key response = kms.generate_data_key(KeyId=key_id, KeySpec='AES_256') plaintext_key = response['Plaintext'] ciphertext_key = response['CiphertextBlob']rypting and decrypting a small string using that data key

upvoted 2 times

...

Dahlia9524

4 months, 2 weeks ago

Selected Answer: C

to make sure encrypt before upload

upvoted 3 times

...

Exam AWS Certified Developer - Associate DVA-C02 All Questions

View all questions & answers for the AWS Certified Developer - Associate DVA-C02 exam

Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 510 discussion

Comments

ShakthiGCP

Dahlia9524

SY0-701