Home › AWS Security › cloudcomputing › scsdatagov › Which AWS service creates and rotates customer-m…
Which AWS service creates and rotates customer-managed encryption keys with IAM-controlled access — used to encrypt EBS, RDS, S3, Secrets Manager values?
AAWS Snowball
BAWS Key Management Service (KMS)
CAmazon EBS
DAmazon Route 53
Answer & Solution
Correct answer: B. AWS Key Management Service (KMS)
KMS is AWS's CMK + envelope-encryption service (per SCS-C02 §5.2, §5.4). The others aren't key-management services.
Related questions
Which AWS service helps a security engineer collect evidence for compliance audits — assesWhich AWS service provides a turnkey multi-account landing-zone with guardrails, account fWhich AWS Organization feature lets a security engineer enforce 'deny all use of root userWhich AWS service centrally manages multiple AWS accounts with consolidated billing, SCPs,Which AWS service automatically discovers and classifies sensitive data (PII, financial daWhich AWS feature lets a security engineer enforce 'no S3 bucket can be made public' acrosWhich Amazon S3 feature enforces WORM (write-once-read-many) data retention to protect logWhich AWS service lightweight-stores parameters + SecureString secrets, integrated with KM