A financial technology company is deploying a payment processing application on AWS. Their security policy mandates that all transaction logs must be encrypted at rest using cryptographic keys where the customer maintains direct control over key access policies. Furthermore, all data transmitted between their application servers and the database must be encrypted. Which of the following actions are responsibilities of the customer under the AWS Shared Responsibility Model to satisfy these requirements? (Select TWO.)
- Configuring SSL/TLS certificates on the database and enabling secure transport protocols for data in transitCevap
- Creating and managing key policies to control user permissions for customer managed keys in AWS Key Management Service (AWS KMS)Cevap
- CManaging the physical security and hardware lifecycle of the hardware security modules (HSMs) that store AWS KMS keys
- DPerforming physical decommissioning and destruction of retired storage media containing the encrypted transaction logs
- EDeploying AWS CloudHSM to automatically manage the rotation of default AWS managed keys for AWS services
Cevap
The correct responsibilities of the customer are configuring SSL/TLS certificates on the database and enabling secure transport protocols for data in transit, and creating and managing key policies to control user permissions for customer managed keys in AWS Key Management Service (AWS KMS).
Under the AWS Shared Responsibility Model, the customer is responsible for data protection parameters they configure within the cloud. This includes configuring secure communication protocols (like SSL/TLS) for data in transit and managing access controls (such as key policies) for customer managed keys at rest.
Adım Adım Çözüm
Anahtar Kavram
Shared Responsibility Model for Data Protection and Encryption