You’re a developer for a company that is developing a .net based application. This application will be hosted in AWS. There is a need to encrypt data. Currently, the company does not have a key store for managing encryption. Which of the following could the developer use in this code for encrypting data?

Answer options:

A.Use S3 Server-side encryption to work with encryption keys.
B.Use the AWS KMS service to generate data keys.
C.Use the AWS Config service to generate data keys.
D.Use S3 client-side encryption to work with encryption keys.

Answer – B
The AWS Documentation mentions the following.
AWS Key Management Service (AWS KMS) is a managed service that makes it easy for you to create and control the encryption keys used to encrypt your data. The master keys you create in AWS KMS are protected by FIPS 140-2 validated cryptographic modules.
Options A and D are incorrect since here there is no mention of working with the S3 service.
Option C is incorrect because the AWS Config service can’t be used to work with encryption keys.
For more information on the KMS service, please refer to the below link-
https://docs.aws.amazon.com/kms/latest/developerguide/overview.html