Question

You are using AWS DynamoDB as a database to save sales data for a global appliance company. Which of the following keys can be used to encrypt the DynamoDB data at rest? (Select TWO)

A. A customer managed CMK in KMS

B. AWS managed CMK (aws/rds)

C. AWS managed CMK (aws/dynamoDB)

D. Server side default encryption key (aws/s3)

Answer 1

Correct Answer - A, C.

For DynamoDB, you can select an option to encrypt some or all of your tables under a customer-managed CMK or the AWS managed CMK in your account.