Valid 312-40 Dumps shared by ExamDiscuss.com for Helping Passing 312-40 Exam! ExamDiscuss.com now offer the newest 312-40 exam dumps, the ExamDiscuss.com 312-40 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 312-40 dumps with Test Engine here:
For securing data, an AWS customer created a key in the Alabama region to encrypt their data in the California region. Two users were added to the key along with an external AWS account. When the AWS customer attempted to encrypt an S3 object, they observed that the key is not listed. What is the reason behind this?
Correct Answer: B
AWS Key Management Service (KMS) keys are region-specific. An encryption key created in one region (e.g., Alabama) cannot be used to encrypt data in another region (e.g., California). When attempting to encrypt an S3 object, the KMS key must reside in the same region as the S3 bucket. This is a limitation designed to ensure data locality and security.