Correct Answer: The primary resource in KMS used to encrypt/decrypt data keys
A CMK is a logical representation of a master key that never leaves the KMS service....
Correct Answer
The primary resource in KMS used to encrypt/decrypt data keys
Why This Answer Is Correct
A CMK is a logical representation of a master key that never leaves the KMS service.
This question evaluates your knowledge of AWS KMS — a core concept tested in AWS Certified Cloud Practitioner (CLF-C02). Understanding AWS KMS is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
What is AWS Key Management Service (KMS) used for?
Which encryption type is supported by AWS KMS for data keys?
What is the difference between an 'AWS Managed Key' and a 'Customer Managed Key'?
Which AWS service provides detailed logs showing exactly when and by whom a KMS key was used to encrypt or decrypt data?