A company is using AWS Key Management Service (AWS KMS) to secure their Amazon RDS databases. An auditor has recommended that the company log all use of their AWS KMS keys.What is the SIMPLEST solution?

Question

Accepted Answer

Use AWS CloudTrail to log AWS KMS key usage.

Answer

Associate AWS KMS metrics with Amazon CloudWatch.

Answer

Deploy a monitoring agent on the RDS instances.

Answer

Poll AWS KMS periodically with a scheduled job.

Home / Amazon / SAA-C01 / Question 72

Question 72

A company is using AWS Key Management Service (AWS KMS) to secure their Amazon RDS databases. An auditor has recommended that the company log all use of their AWS KMS keys.What is the SIMPLEST solution?

Answers

Associate AWS KMS metrics with Amazon CloudWatch.

Use AWS CloudTrail to log AWS KMS key usage.

Deploy a monitoring agent on the RDS instances.

Poll AWS KMS periodically with a scheduled job.

Advertisement

References (click to expand)