AWS Certified Solutions Architect – Associate (SAA-C03) — Question 118

A company wants to build a scalable key management infrastructure to support developers who need to encrypt data in their applications.
What should a solutions architect do to reduce the operational burden?

Answer options

• A. Use multi-factor authentication (MFA) to protect the encryption keys.
• B. Use AWS Key Management Service (AWS KMS) to protect the encryption keys.
• C. Use AWS Certificate Manager (ACM) to create, store, and assign the encryption keys.
• D. Use an IAM policy to limit the scope of users who have access permissions to protect the encryption keys.

Correct answer: B

Explanation

The correct answer is B, as AWS Key Management Service (AWS KMS) provides a fully managed key management solution that simplifies encryption key management, thereby reducing operational overhead. Options A, C, and D do not specifically address the need for a scalable key management system, as MFA focuses on authentication, ACM deals with certificates rather than encryption keys, and IAM policies only control access without providing key management capabilities.