Home › AWS Developer Associate › cloudcomputing › awsdevsecurity › Which service generates and manages encryption k…
Which service generates and manages encryption keys backed by HSMs, with audit logs and granular key policies?
AAWS Key Management Service (KMS)
BAmazon S3 Glacier
CAmazon Route 53
DAmazon CloudWatch
Answer & Solution
Correct answer: A. AWS Key Management Service (KMS)
KMS is the managed crypto-key service — HSM-backed, audit via CloudTrail, key policies + IAM. The others are observability, archival storage, and DNS.
Related questions
An S3 bucket policy grants `s3:GetObject` only when the request includes a specific VPC enWhich approach correctly handles environment-specific configuration (DB endpoints, featureAn application must encrypt user-uploaded files in S3 with a key the customer controls (CMWhich IAM feature lets a developer's IAM role temporarily "impersonate" a service-account-A Lambda function reads database credentials at cold start from AWS Secrets Manager and caAn API Gateway REST API needs to require a valid Amazon Cognito ID token on every call. WhWhich IAM construct is best for granting a CodeBuild project the right to read from one spWhich AWS service issues, manages, and auto-renews public TLS certificates for use with AL