Valid DEA-C01 Dumps shared by EduDump.com for Helping Passing DEA-C01 Exam! EduDump.com now offer the newest DEA-C01 exam dumps, the EduDump.com DEA-C01 exam questions have been updated and answers have been corrected get the newest EduDump.com DEA-C01 dumps with Test Engine here:
A company needs a solution that restricts access to Amazon S3 data and encrypts the data by using AWS managed keys. The solution must manage database credentials that an AWS Lambda function uses and must rotate the credentials automatically. Which solution will meet these requirements?
Correct Answer: B
IAM policies can be used to control access to Amazon S3 data, and server-side encryption with AWS KMS keys (SSE-KMS) supports encryption by using an AWS managed KMS key such as aws/s3. AWS Secrets Manager is the managed service designed to store database credentials and rotate them automatically, including rotation by using a Lambda function. This combination satisfies the requirements for S3 access control, encryption with AWS managed keys, and automatic credential rotation for the Lambda-based application. Reference: https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingKMSEncryption.html https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-policy-language-overview.html https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html