AWS Certified Developer Associate (#187)

A Developer must encrypt a 100-GB object using AWS KMS. What is the BEST approach?

Make an
Encrypt
API call to encrypt the plaintext data as ciphertext using a customer master key (CMK)
Make an
Encrypt
API call to encrypt the plaintext data as ciphertext using a customer master key (CMK) with imported key material
Make a
GenerateDataKey
API call that returns a plaintext key and an encrypted copy of a data key. Use a plaintext key to encrypt the data
Make a
GenerateDataKeyWithoutPlaintext
API call that returns an encrypted copy of a data key. Use an encrypted key to encrypt the data