A company is building an ecommerce application and must store sensitive customer information while allowing customers to complete purchases. The company also needs to ensure sensitive customer data is protected even from database administrators. Which solution meets these requirements?
Choose an answer
Tap an option to check your answer.
Correct answer: Store sensitive data in Amazon RDS for MySQL. Use AWS Key Management Service (AWS KMS) client-side encryption to encrypt the data..
Why this is the answer
The correct solution is to store sensitive data in Amazon RDS for MySQL and use AWS KMS client-side encryption. This approach encrypts the data before it leaves the application and is stored in the database, ensuring that even database administrators cannot view the plaintext sensitive information. RDS provides a managed database service suitable for an ecommerce application. Storing data in EBS volumes or Amazon S3 with server-side encryption protects data at rest but does not prevent a database administrator with access to the database from viewing the plaintext data. Amazon FSx for Windows Server is a file system, not typically used for structured application data like customer profiles in an ecommerce scenario, and Windows file permissions alone do not provide the necessary protection against database administrators accessing the data within the database itself.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed