hard20 pts · first answer countscloud-securitykms

KMS grants

An application needs to give an AWS service temporary permission to use a key for one job, then remove it, without editing the key policy each time. What KMS feature is designed for this?

A.Grants, which delegate key use and can be retired or revokedB.Aliases, which point a friendly name at the keyC.Multi-Region keys, which copy the key to other regionsD.Key rotation, which creates a new key for each job

Discussion 0

Join free to post in the discussion.

KMS grants

Discussion 0

Related questions