A logistics company is deploying a global package tracking system on AWS. The security team mandates that all telemetry data must be encrypted in transit from the tracking devices to the application's Application Load Balancer. Under the AWS Shared Responsibility Model, which of the following actions is the responsibility of the customer to meet this requirement?
- Configuring the Application Load Balancer with an HTTPS listener and associating a valid SSL/TLS certificateAnswer
- BMaintaining the physical security and integrity of the network switches and routers that transmit the data
- CPatching and updating the hypervisor software on the physical hosts supporting the load balancer service
- DProvisioning a dedicated AWS CloudHSM cluster to automatically intercept and decrypt all incoming public web traffic
Answer
Configuring the Application Load Balancer with an HTTPS listener and associating a valid SSL/TLS certificate
Under the AWS Shared Responsibility Model, AWS secures the physical infrastructure and hypervisor layers, while the customer is responsible for configuring security settings for their deployed resources. For encrypting data in transit to an Application Load Balancer, the customer must configure an HTTPS listener and associate it with an SSL/TLS certificate (which can be provisioned via AWS Certificate Manager).
Step-by-Step Solution
Key Concept
AWS Shared Responsibility Model for Data in Transit Encryption
Estimated Time:1m 30s