You are developing an application that uses the Amazon Kinesis Producer Library (KPL) to put data records to an encrypted Kinesis data stream. However, when your application runs, there is an unauthorized KMS master key permission error. How would you resolve the problem?

Answer options:

A.Configure the application’s IAM role as the key administrator of the KMS key.
B.In the KMS key policy, assign the permission to the application to access the key.
C.Re-encrypt the Kinesis data stream with AWS/kinesis.
D.Configure the KPL not to encrypt the data records for the Kinesis data stream.

Correct Answer – B
Option A is incorrect because the IAM role should be configured as a key user instead of an administrator.
Option B is CORRECT because the application would need to have permission to use the KMS key when putting records in the stream.
Option C is incorrect because the encryption of the Kinesis data stream should not be changed. This is a key permission issue, and the key policy should be modified to address the problem.
Option D is incorrect because KPL does not have such a configuration.
Reference:
https://docs.aws.amazon.com/streams/latest/dev/troubleshooting-producers.html.
https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html.