You're a developer for a company that is developing a .net based application.
This application will be hosted in AWS.
There is a need to encrypt data.
Currently, the company does not have a key store for managing encryption.
Which of the following could the developer use in this code for encrypting data?
Click on the arrows to vote for the correct answer
A. B. C. D.Answer - B.
The AWS Documentation mentions the following.
AWS Key Management Service (AWS KMS) is a managed service that makes it easy for you to create and control the encryption keys used to encrypt your data.
The master keys you create in AWS KMS are protected by FIPS 140-2 validated cryptographic modules.
Options A and D are incorrect since here there is no mention of working with the S3 service.
Option C is incorrect because the AWS Config service can't be used to work with encryption keys.
For more information on the KMS service, please refer to the below link-
https://docs.aws.amazon.com/kms/latest/developerguide/overview.htmlAs a developer for a company developing a .net based application that will be hosted on AWS, you are tasked with encrypting data. Currently, the company does not have a key store for managing encryption. Which of the following options should you use to encrypt data?
The best option for encrypting data in this scenario would be to use the AWS KMS (Key Management Service) to generate data keys.
AWS KMS is a fully managed service that makes it easy for you to create and control the encryption keys used to encrypt your data. KMS allows you to create customer master keys (CMKs) and data keys that can be used to encrypt and decrypt your data. You can also use KMS to manage and rotate your encryption keys, and audit your key usage to meet your compliance requirements.
Using S3 server-side encryption is an option, but it is more appropriate when storing data in S3, rather than encrypting data in your application. S3 server-side encryption provides a way to encrypt data at rest in S3 buckets using keys managed by AWS. This can provide additional security for data stored in S3, but it may not meet the specific needs of encrypting data in your application.
AWS Config service is not a service that provides encryption or key management. It is a service that provides you with a detailed inventory of your AWS resources, configuration history, and configuration change notifications.
S3 client-side encryption can also be used to encrypt data, but it may not be the best option for this scenario since it requires the application to manage the encryption keys, which can be more complex and risky than using a managed service like AWS KMS.
In conclusion, the best option for encrypting data in a .net based application hosted in AWS, would be to use the AWS KMS service to generate data keys.