You are developing an application that will use Kinesis Firehose to stream the records onto the Simple Storage Service. Your company policy mandates that all data needs to be encrypted at rest. How can you achieve this with Kinesis Firehose? Choose 2 answers for the options given below.

Answer options:

A.Enable Encryption on the Kinesis Data Firehose.
B.Install an SSL certificate in Kinesis Data Firehose.
C.Ensure that all data records are transferred via SSL.
D.Ensure that Kinesis streams are used to transfer the data from the producers.

Answer – A and D
This is given in the AWS Documentation.
Option A is correct because you can enable encryption ( encryption of data at rest ) for Kinesis Data Firehose.
Option D is correct because when Kinesis Streams are chosen as source, then encryption of data at rest is enabled automatically.
Options B and C are invalid because this is used for encrypting data in transit.
For more information on Data encryption with Kinesis Firehose, please refer to the below URL-
https://docs.aws.amazon.com/firehose/latest/dev/encryption.html