What is the function of the following AWS Key Management Service (KMS) key policy attached to a customer master key (CMK)?
 

A. The Amazon WorkMail and Amazon SES services have delegated KMS encrypt and decrypt permissions to the ExampleUser principal in the 111122223333 account.

B. The ExampleUser principal can transparently encrypt and decrypt email exchanges specifically between ExampleUser and AWS.

C. The CMK is to be used for encrypting and decrypting only when the principal is ExampleUser and the request comes from WorkMail or SES in the specified region.

D. The key policy allows WorkMail or SES to encrypt or decrypt on behalf of the user for any CMK in the account.








 

Suggested Answer: C

Community Answer: C

Reference:
https://docs.aws.amazon.com/kms/latest/developerguide/policy-conditions.html#conditions-kms-via-service


This question is in SCS-C01 AWS Certified Security – Specialty Exam
For getting AWS Certified Security – Specialty Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Amazon.
Trademarks, certification & product names are used for reference only and belong to Amazon.
The website does not contain actual questions and answers from Amazon's Certification Exam.