AWS - Advanced Security
You want to allow an EC2 instance to use a KMS key for encryption without sharing the key material. What is the best way to achieve this?
You want to allow an EC2 instance to use a KMS key for encryption without sharing the key material. What is the best way to achieve this?
hard📝 Application Q8 of 15
Step-by-Step Solution
Solution:
Step 1: Understand secure key usage
KMS keys are managed by AWS; key material should never be shared or copied.Step 2: Use IAM roles for permissions
Assigning an IAM role with kms:Encrypt permission allows EC2 to use the key securely.Final Answer:
Attach an IAM role to the EC2 instance with kms:Encrypt permission on the key -> Option AQuick Check:
Use IAM roles, not key material sharing [OK]
Quick Trick: Use IAM roles to grant KMS permissions securely [OK]
Common Mistakes:
- Sharing key material manually
- Storing keys in environment variables
Master "Advanced Security" in AWS
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore AWS Quizzes