Exam AWS Certified Developer Associate topic 1 question 150 discussion

Exam question from Amazon's AWS Certified Developer Associate

Question #: 150
Topic #: 1

[All AWS Certified Developer Associate Questions]

A banking application processes thousands of transactions each second. Each transaction payload must have end-to-end encryption. The application encrypts each transaction locally by using the AWS Key Management Service (AWS KMS) GenerateDataKey operation. A developer is testing the application and receives a ThrottlingException error.

Which actions are best practices to resolve this error? (Choose two.)

A. Use the LocalCryptoMatenalsCache feature of the AWS Encryption SDK encryption library.
B. Call the AWS KMS Encrypt operation directly to allow AWS KMS to encrypt the data.
C. Create a case in the AWS Support Center to increase the quota for the account.
D. Use Amazon Simple Queue Service (Amazon SQS) to queue the requests to AWS KMS.
E. Switch to an AWS KMS custom key store.

Show Suggested Answer

Suggested Answer: AC 🗳️

by dark_cherrymon at Nov. 21, 2022, 3:01 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

a_win

1 year, 5 months ago

Selected Answer: CE

Option A is not generic solution for application written in different language with different versions: "Data key caching is not supported by the AWS Encryption SDK for .NET. Version 3.x of the AWS Encryption SDK for Java deprecates the caching CMM. However, version 4.x of the AWS Encryption SDK for .NET and version 3.x of the AWS Encryption SDK for Java support the AWS KMS Hierarchical keyring, an alternative cryptographic materials caching solution." (Ref : https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/data-key-caching.html)

upvoted 1 times

...

rcaliandro

1 year, 11 months ago

Selected Answer: AC

If ThrottlingException is received then the quota for the account has been reached and it's possible to request to support to increase the quota for the account (answer C). Furthemore, "Data key caching stores data keys and related cryptographic material in a cache. When you encrypt or decrypt data, the AWS Encryption SDK looks for a matching data key in the cache. If it finds a match, it uses the cached data key rather than generating a new one. Data key caching can improve performance, reduce cost, and help you stay within service limits as your application scales." by AWS documentation: https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/data-key-caching.html. Also A is a correct option

upvoted 2 times

...

sichilam

2 years, 5 months ago

Use the data key caching feature with the AWS Encryption SDK encryption library. Data key caching reduces the rate of API requests by caching and reusing the data keys for encryption to meet cost and performance requirements.

upvoted 2 times

...

ayoubmk

2 years, 5 months ago

Selected Answer: AC

https://aws.amazon.com/premiumsupport/knowledge-center/kms-throttlingexception-error/

upvoted 3 times

...

SBoksh

2 years, 6 months ago

Selected Answer: AC

https://aws.amazon.com/premiumsupport/knowledge-center/kms-throttlingexception-error/

upvoted 2 times

...

dark_cherrymon

2 years, 6 months ago

and A "Use the data key caching feature with the AWS Encryption SDK encryption library. Data key caching reduces the rate of API requests by caching and reusing the data keys for encryption to meet cost and performance requirements." https://aws.amazon.com/premiumsupport/knowledge-center/kms-throttlingexception-error/#:~:text=The%20ThrottlingException%20error%20code%20indicates,KMS%20service%20throttles%20the%20request. which leads me to https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/data-caching-details.html#simplecache " To create an instance of the local cache, use the LocalCryptoMaterialsCache constructor in Java and Python, the"

upvoted 2 times

...

dark_cherrymon

2 years, 6 months ago

Selected Answer: C

it's definately C "Request an AWS KMS quota increase to exceed the request quota." https://aws.amazon.com/premiumsupport/knowledge-center/kms-throttlingexception-error/#:~:text=The%20ThrottlingException%20error%20code%20indicates,KMS%20service%20throttles%20the%20request.

upvoted 2 times

...