medium10 pts · first answer countscloud-securitykmsleast-privilege

One key for dev and prod

Dev and prod RDS databases in the same account use the same customer managed KMS key, and developers have kms:Decrypt on it for dev work. What is the risk?

A.The key will be throttled because two databases use itB.Developers can also decrypt prod data and snapshots under that keyC.KMS keys cannot be shared by more than one databaseD.There is no risk, since RDS encrypts each database separately

Discussion 0

Join free to post in the discussion.

One key for dev and prod

Discussion 0

Related questions