Exam AWS Certified Developer Associate topic 1 question 337 discussion

https://aws.amazon.com/blogs/security/how-to-protect-sensitive-data-for-its-entire-lifecycle-in-aws/

A and E are the two when it comes to security in transit. Although I don't like the fact that Cloudfront is not mentioned in the question. It makes me think about C, but C is more about securing your entire application, not the data in transit.

You can protect data in-transit over individual communications channels using transport layer security (TLS), and at-rest in individual storage silos using volume encryption, object encryption or database table encryption. However, if you have sensitive workloads, you might need additional protection that can follow the data as it moves through the application stack. Fine-grained data protection techniques such as field-level encryption allow for the protection of sensitive data fields in larger application payloads while leaving non-sensitive fields in plaintext. https://aws.amazon.com/blogs/security/how-to-protect-sensitive-data-for-its-entire-lifecycle-in-aws/

If it is "A", should CloudFront at least be mentioned in the question? Precision matters, I'm sorry, but it is not "A" the way this is written. C and E. Use TLS and rotate the keys.

should be A, E

I believe A and E

AE https://aws.amazon.com/blogs/security/how-to-protect-sensitive-data-for-its-entire-lifecycle-in-aws/