AWS Certified Developer Associate Practice Test 6

Correct answer - "GenerateDataKey" : Envelope encryption is the practice of encrypting plaintext data with a data key, and then encrypting the data key under another key. GenerateDataKey returns a data encryption key that you can use in your application to encrypt data locally.

Encrypt" - You don't need use this operation to encrypt a data key, GenerateDataKey returns the a data encryption key

"RetrieveCMK" - Action does not exist

"Decrypt" - Decrypts ciphertext

For more information visit