Home / Amazon / SAA-C01 / Question 295

A Solutions Architect is considering possible options for improving the security of the data on an Amazon EBS volume attached to an Amazon EC2 instance.Which solution will improve the security of the data?

• Use AWS KMS to encrypt the EBS volume

• Create an IAM policy that restricts read and write access to the volume

• Migrate the sensitive data to an instance store volume

• Use Amazon single sign-on to control login access to the EC2 instance

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html