A company needs to build a code-signing solution using an AWS KMS asymmetric key and...

Vendor: Amazon Web Services
Product: SCS-C03
Update on: Feb 3, 2026
Questions: 121

Amazon Web Services SCS-C03 Question Answer

A company needs to build a code-signing solution using an AWS KMS asymmetric key and must store immutable evidence of key creation and usage for compliance and audit purposes.

Which solution meets these requirements?

Create an Amazon S3 bucket with S3 Object Lock enabled. Create an AWS CloudTrail trail with log file validation enabled for KMS events. Store logs in the bucket and grant auditors access.

Log application events to Amazon CloudWatch Logs and export them.

Capture KMS API calls using EventBridge and store them in DynamoDB.

Track KMS usage with CloudWatch metrics and dashboards.