AWS Certified Big Data - Specialty (#61)

An Amazon Kinesis stream needs to be encrypted. Which approach should be used to accomplish this task?

Perform a client-side encryption of the data before it enters the Amazon Kinesis stream on the producer.
Use a partition key to segment the data by MD5 hash functions, which makes it undecipherable while in transit.
Perform a client-side encryption of the data before it enters the Amazon Kinesis stream on the consumer.
Use a shard to segment the data, which has built-in functionality to make it indecipherable while in transit.