The customer data of an application is stored in an S3 bucket. Your team would like to use Amazon Athena to analyze the data using standard SQL. However, the data in the S3 bucket is encrypted via SSE-KMS. How would you create the table in Athena for the encrypted data in S3?

Answer options:

A.You need to provide the private KMS key to Athena.
B.Athena decrypts the data automatically, and you do not need to provide key information.
C.You need to convert SSE-KMS to SSE-S3 before creating the table in Athena.
D.You need to disable the server-side encryption in S3 before creating the Athena table.

Correct Answer – B
Option A is incorrect because, for SS3-KMS, Athena can determine the proper materials to decrypt the dataset when creating the table. You do not need to provide the key information to Athena.
Option B is CORRECT because Athena can create the table for the S3 data encrypted by SSE-KMS.
Options C and D are incorrect because these steps are not required. Athena can create tables for the dataset encrypted by SSE-KMS.
Reference:
https://docs.aws.amazon.com/athena/latest/ug/creating-tables-based-on-encrypted-datasets-in-s3.html.