ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Developer - Associate DVA-C02 All Questions

View all questions & answers for the AWS Certified Developer - Associate DVA-C02 exam
Go to Exam

Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 539 discussion

Exam question from Amazon's AWS Certified Developer - Associate DVA-C02
Question #: 539
Topic #: 1
[All AWS Certified Developer - Associate DVA-C02 Questions]

A company uses two AWS accounts: production and development. The company stores data in an Amazon S3 bucket that is in the production account. The data is encrypted with an AWS Key Management Service (AWS KMS) customer managed key. The company plans to copy the data to another S3 bucket that is in the development account.

A developer needs to use a KMS key to encrypt the data in the S3 bucket that is in the development account. The KMS key in the development account must be accessible from the production account,

Which solution will meet these requirements?

  • A. Replicate the customer managed KMS key from the production account to the development account. Specify the production account in the key policy.
  • B. Create a new customer managed KMS key in the development account. Specify the production account in the key policy.
  • C. Create a new AWS managed KMS key for Amazon S3 in the development account. Specify the production account in the key policy.
  • D. Replicate the default AWS managed KMS key for Amazon S3 from the production account to the development account. Specify the production account in the key policy.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by 0bdf3af at March 4, 2025, 9:55 a.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
0bdf3af
1 month, 3 weeks ago
Selected Answer: C
C or B I would say C. We don't know exactly which type of KMS key will be used in development account.. KMS cusutomer key or KMS AWS menaged key? I guess the second one so it could be just default aws/s3 key. The other thing is that production account should have access tho this new key but development account should not have access to AWS customer key in production account. Is is quite logical. Sharing acceess to key with other accaount is to specify the account in KMS key policy.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago