AWS Tutorial AWS Solutions Architect and SysOps Administrator - Key Management Service (Lab)

This video tutorial explains how to create and manage encryption keys using AWS Key Management Service (KMS). It covers the differences between AWS managed keys and customer managed keys, and provides a step-by-step guide on creating customer managed keys in the AWS Management Console. The tutorial also discusses assigning IAM users and roles to manage these keys, and how to view key metadata and set key rotation policies.

What is the primary difference between AWS managed keys and customer managed keys?

• AWS managed keys allow user control over key rotation.

• Customer managed keys are fully controlled by AWS.

• AWS managed keys are controlled by AWS, while customer managed keys offer user control over key management.

• Both types of keys offer the same level of user control.

What is the first step in creating a customer managed key in AWS?

• Choosing the key type as symmetric or asymmetric.

• Providing tags for the key.

• Assigning an IAM user as the administrator.

• Selecting IAM roles for key usage.

Which key type generates both public and private keys?

• Asymmetric

• Dynamic

• Symmetric

• Hybrid

What can be specified to automatically rotate customer managed keys?

• Key deletion policy

• Key rotation frequency

• Key usage policy

• Key creation date

Who can delete a customer managed key if the deletion option is checked?

• No one can delete it

• The IAM user assigned as the administrator

• Only the AWS account owner

• Any IAM user