Your application currently uses customer keys which are generated via AWS KMS in the US east region. You now want to use the same set of keys from the EU-Central region. How can this be accomplished?

Answer options:

A.Export the key from the US east region and import them into the EU-Central region
B.Use key rotation and rotate the existing keys to the EU-Central region
C.Use the backing key from the US east region and use it in the EU-Central region
D.Use AWS KMS multi-Region keys.

Answer - D
Option A is incorrect because keys cannot be exported and imported across regions.
Option B is incorrect because key rotation cannot be used to export keys.
Option C is incorrect because the backing key cannot be used to export keys
Option D is correct because with AWS KMS multi-Region keys you can choose to replicate a multi-Region primary key into multiple Regions within the same AWS partition. A single-Region KMS key generated by AWS KMS is stored and used only in the Region in which it was created.
For more information on KMS please visit the following URL:
https://aws.amazon.com/kms/faqs/