Which CMK-related problems possibly account for the error?

A development team is attempting to encrypt and decode a secure string parameter from the IAM Systems Manager Parameter Store using an IAM Key Management Service (IAM KMS) CMK. However, each attempt results in an error message being sent to the development team.

Which CMK-related problems possibly account for the error? (Select two.)
A . The CMK is used in the attempt does not exist.
B . The CMK is used in the attempt needs to be rotated.
C . The CMK is used in the attempt is using the CMK™s key ID instead of the CMK ARN.
D . The CMK is used in the attempt is not enabled.
E . The CMK is used in the attempt is using an alias.

View Answer

Answer: A D

Explanation:

https://docs.IAM.amazon.com/kms/latest/developerguide/services-parameter-store.html#parameter-store-cmk-fa