A startup firm has deployed bill payment application servers on custom on-premises servers which handles all users` requests. Amazon CloudFront has been deployed which forwards user HTTPS request to these custom origin servers. Last week there was a security breach incident wherein client credit card information was leaked from these servers. As an AWS Consultant, the security head from a startup firm is looking for your guidance to enhance security for users performing transactions with credit cards. Which of the following security feature can be implemented to provide additional security for credit card transactions?

Answer options:

A.Use Field-Level Encryption capability with Amazon CloudFront to encrypt all fields in POST request using 2048 bits RSA key pair.
B.Use Field-Level Encryption capability with Amazon CloudFront to encrypt all fields in POST request using 1024 bits RSA key pair.
C.Use Field-Level Encryption capability with Amazon CloudFront to encrypt specific fields in POST request using 2048 bits RSA key pair.
D.Use Field-Level Encryption capability with Amazon CloudFront to encrypt specific fields in POST request using 1024 bits RSA key pair.

Correct Answer – C
Field-Level Encryption can be configured on Amazon CloudFront to encrypt specific fields in HTTPS requests sent to origin servers. This provides additional security for sensitive data which is forwarded to origin servers. In the above case, the client is already using HTTPS between Amazon CloudFront & custom servers. To safeguard credit card information that is sent to these servers, Amazon CloudFront can be configured to use Field-Level Encryption for these fields in POST requests. To set up Field-Level Encryption, RSA key pair with 2048 bits is required.
Option A is incorrect as Field-Level Encryption does not support all data encryption, but only specific fields in POST requests to origin servers.
Options B & Dare incorrect as RSA key size should be 2048 bits & not 1024 bits.
For more information on using Field-Level encryption with Amazon CloudFront, refer to the following URL
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html