Configuration Panel PBQs: AWS Certified Security - Specialty (SCS-C03)
easyQuestion 1 of 3
Your security team has created a new KMS customer managed key named 'prod-data-encryption-key' for encrypting sensitive data in your production account. The key was created with default settings and needs to be hardened before being used. You must enable automatic key rotation, configure the key description, and ensure the key policy restricts usage appropriately. Configure the KMS key settings according to the objectives.
KMS > Customer managed keys > prod-data-encryption-key
prod-data-encryption-key
AWS KMS > Customer managed keys > prod-data-encryption-key
Key Details
▾mrk-a1b2c3d4e5f6g7h8i9j0
arn:aws:kms:us-east-1:123456789012:key/mrk-a1b2c3d4e5f6g7h8i9j0
SYMMETRIC_DEFAULT
Key Rotation
▾Automatically rotates the key material every rotation period
Progress
0 of 4 settings correctAdjust the configuration settings to meet the requirements
0 of 3 marked complete

