Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 438 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C03

Question #: 438
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C03 Questions]

A company wants to share accounting data with an external auditor. The data is stored in an Amazon RDS DB instance that resides in a private subnet. The auditor has its own AWS account and requires its own copy of the database.

What is the MOST secure way for the company to share the database with the auditor?

A. Create a read replica of the database. Configure IAM standard database authentication to grant the auditor access.
B. Export the database contents to text files. Store the files in an Amazon S3 bucket. Create a new IAM user for the auditor. Grant the user access to the S3 bucket.
C. Copy a snapshot of the database to an Amazon S3 bucket. Create an IAM user. Share the user's keys with the auditor to grant access to the object in the S3 bucket.
D. Create an encrypted snapshot of the database. Share the snapshot with the auditor. Allow access to the AWS Key Management Service (AWS KMS) encryption key.

Show Suggested Answer

Suggested Answer: D 🗳️

by nosense at May 16, 2023, 1:51 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

alexandercamachop

Highly Voted 2 years ago

Selected Answer: D

The most secure way for the company to share the database with the auditor is option D: Create an encrypted snapshot of the database, share the snapshot with the auditor, and allow access to the AWS Key Management Service (AWS KMS) encryption key. By creating an encrypted snapshot, the company ensures that the database data is protected at rest. Sharing the encrypted snapshot with the auditor allows them to have their own copy of the database securely. In addition, granting access to the AWS KMS encryption key ensures that the auditor has the necessary permissions to decrypt and access the encrypted snapshot. This allows the auditor to restore the snapshot and access the data securely. This approach provides both data protection and access control, ensuring that the database is securely shared with the auditor while maintaining the confidentiality and integrity of the data.

upvoted 23 times

TariqKipkemei

2 years ago

best explanation ever

upvoted 4 times

...

Guru4Cloud

Highly Voted 1 year, 10 months ago

Selected Answer: D

Key word: "Secure way" The snapshot contents are encrypted using KMS keys for data security. Sharing the snapshot directly removes risks of extracting/transferring data. The auditor can restore the snapshot into their own RDS instance. Access is controlled through sharing the encrypted snapshot and KMS key.

upvoted 5 times

...

24b2e9e

Most Recent 1 year ago

why not A ?

upvoted 5 times

2 years, 1 month ago

Option D (Creating an encrypted snapshot of the database, sharing the snapshot, and allowing access to the AWS Key Management Service encryption key) is generally considered a better option for sharing the database with the auditor in terms of security and control.

upvoted 3 times

...

nosense

2 years, 1 month ago

Selected Answer: D

D for me

upvoted 3 times

...