Managing CMK Keys and Creating ALIAS Keys: Important Considerations
Question
You are the Security Administrator for your company.
You need to manage the CMK keys for your company's account.
You have been requested to create ALIAS for keys.
Which of the following facts do you need to be aware of when creating ALIAS keys? Choose 2 Options.
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.Answer - A and C.
The AWS Documentation mentions the following.
Each CMK can have multiple aliases, but each alias points to only one CMK.
The alias name must be unique in the AWS account and region.
To simplify code that runs in multiple regions, you can use the same alias name but point it to a different CMK in each region.
You can use AWS KMS API operations to list, create, and delete aliases.
You can also update an alias, which associates an existing alias with a different CMK.
There is no operation to edit or change an alias name.
If you create an alias for a CMK that already has an alias, the operation creates another alias for the same CMK.
To change an alias name, delete the current alias and create a new alias for the CMK.
Since the AWS Documentation clearly mentions the dimensions of the aliases, the other options are invalid.
For more information on working with ALIASs, please visit the below URL.
https://docs.aws.amazon.com/kms/latest/developerguide/programming-aliases.htmlAs the Security Administrator for your company, you need to manage the customer master keys (CMKs) for your company's AWS account. One of the tasks you have been assigned is to create ALIAS keys for the CMKs. The following are the facts that you need to be aware of when creating ALIAS keys:
A. The ALIAS key must be unique in the AWS account and region.
When you create an ALIAS key, you must ensure that the name you choose for the ALIAS is unique within the AWS account and region where you are creating it. If you try to create an ALIAS key with a name that is already in use, AWS will return an error message.
B. An ALIAS key can point to multiple CMK keys at a time.
One of the benefits of using ALIAS keys is that you can create an alias that points to multiple CMK keys at a time. This allows you to simplify the management of your keys, as you can use a single ALIAS to encrypt and decrypt data with multiple CMK keys.
C. Each CMK key can have multiple ALIASs points to it.
Another benefit of using ALIAS keys is that you can create multiple aliases that point to a single CMK key. This can be useful if you have multiple applications or services that need to access the same CMK key, as you can create separate aliases for each application or service.
D. After the ALIAS is created, it cannot be modified to point to another CMK.
Once you have created an ALIAS key, you cannot modify it to point to another CMK key. If you need to change the CMK key that an ALIAS points to, you will need to create a new ALIAS key with the new CMK key.
In summary, when creating ALIAS keys for your company's AWS account, you need to ensure that the ALIAS name is unique in the AWS account and region, and you can use a single ALIAS to point to multiple CMK keys, while each CMK key can have multiple ALIAS keys pointing to it. However, once an ALIAS key is created, it cannot be modified to point to another CMK key.
