A
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/EncryptionAtRest.html
AWS owned key – Default encryption type. The key is owned by DynamoDB (no additional charge).
AWS managed key – The key is stored in your account and is managed by AWS KMS (AWS KMS charges apply).
Customer managed key – The key is stored in your account and is created, owned, and managed by you. You have full control over the KMS key (AWS KMS charges apply).
Sorry, the only thing I am not sure 100% that the default AWS owned key, that is managed by DynamoDB, is also managed in an hidden way by KMS. But this doesn't change the answer, A still correct
I have the doubt because when you create a DynamoDB table, under the default key is written: "The AWS KMS key is owned and managed by DynamoDB. You are not charged an additional fee for using this key."
But if I go in KMS, I can't see any key like "aws/dynamodb" or "aws/simpletable" or something like that. Someone has the answer for me, please?
The correct answer is A. Create the DynamoDB table by using default encryption settings.
Creating a DynamoDB table by using default encryption settings will automatically encrypt the entire table at rest without any additional configuration. This option is the most cost-effective as there are no additional costs for configuring encryption or using additional services.
Option B, using the DynamoDB Encryption Client, provides client-side encryption to encrypt data before it is sent to DynamoDB. While this option also encrypts the entire table at rest, it requires additional effort and complexity to implement and manage.
Option C, configuring encryption at rest with an AWS KMS AWS managed key, is a good solution for greater control over encryption keys and to meet specific compliance requirements. However, this option incurs additional costs for using AWS KMS.
Option D, configuring encryption at rest with an AWS KMS customer managed key, provides even greater control over encryption keys, but also incurs additional costs for using AWS KMS and managing the customer-managed key.
Amazon DynamoDB always encrypts all your data at rest by default to help enhance the security of your DynamoDB data. The only choice a developer has is to choose how this encryption is performed.
Reference: https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/EncryptionAtRest.html
The answer is A. The question is asking for the most cost-effective option. You need to select the default option which encrypts data at rest using AWS owned key. No encryption charges apply with this option. If you choose any option that involves KMS, remember that it is a paid service and charges will apply.
Amazon DynamoDB always encrypts all your data at rest by default to help enhance the security of your DynamoDB data. The only choice a developer has is to choose how this encryption is performed.
Reference: https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/EncryptionAtRest.html
it's not C. DynamoDB uses enhanced encryption by default using AWS KMS with 3 different options you can choose any time: aws owned key (answer A), managed key, customer managed key.
C and D requires additional costs, hence are not cost effective. Sorry pal
The most cost-effective solution for encrypting an Amazon DynamoDB table at rest would be to enable server-side encryption using AWS KMS (Key Management Service) managed keys. This option is available at no extra charge, and it ensures that all data stored in the table is encrypted. Simply enable server-side encryption using the default KMS key when creating the DynamoDB table.
The default encryption setting for Amazon DynamoDB is unencrypted so A is out. Option B would require the development and maintenance of additional custom code, which would increase costs.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
kapil206001
Highly Voted 2 years, 5 months agorcaliandro
Most Recent 1 year, 10 months agorcaliandro
1 year, 10 months agorcaliandro
1 year, 10 months agoMMaquis
2 years, 2 months agom4r0ck
2 years, 2 months agopancman
2 years, 2 months agoShriniW
2 years, 2 months agopancman
2 years, 2 months agom4r0ck
2 years, 2 months agoMMaquis
2 years, 2 months agoMICROWAPPP
2 years, 2 months agochitrank
2 years, 3 months agounbornfroyo
2 years, 3 months agopancman
2 years, 2 months ago929
2 years, 3 months agoalecs_adam
2 years, 3 months agok1kavi1
2 years, 5 months ago