Câu 17: AWS Certified Security - Specialty SCS-C03(New)

A security team manages a company's AWS Key Management Service (AWS KMS) customer managed keys. Only members of the security learn can administer the KMS keys. The company’s application team has a software process that needs temporary access to the keys occasionally. The security team needs to provide the application team's software process with access to the keys. Which solution will meet these requirements with the LEAST operational overhead?

1. A. Export the KMS key material to an on-premises hardware security module (HSM). Give the application team access to the key material.
2. B. Edit the key policy that grants the security team access to the KMS keys by adding the application team as principals. Revert this change when the application team no longer needs access
3. C. Create a key grant to allow the application team to use the KMS keys. Revoke the grant when the application team no longer needs access. — đáp án hiện tại
4. D. Create a new KMS key by generating key material on promises. Import the key material to AWS KMS whenever the application team needs access. Grant the application team permissions to use the key.