
Define which IAM users and roles can manage keys. Create both symmetric and asymmetric data key pairs for local use within your applications. Import your own symmetric key for use within the service.

Create symmetric and asymmetric keys where the key material is only ever used within the service - Create symmetric keys where the key material is generated and used within a custom key store under your control. are simple key-value pairs that are indexed for use with filter expressions. It cannot group traces from recorded data. 4) Subsegment - is incorrect because it is only used to provide more granular timing information and details about downstream calls that your application made to fulfill the original request. Additionally, sampling will help you save money by reducing the amount of traces for high-volume and unimportant requests. 3) Sampling - is incorrect because it is just used to ensure efficient tracing and to provide a representative sample of the requests that your application serves. You commonly use metadata to record data that you want to store in the trace but don't need to search for traces. Metadata are key-value pairs with values of any type, including objects and lists, but that is not indexed. 2) Metadata - is incorrect because you can not group traces with it.

Hence, the correct answer is: Annotations. Use annotations to record data that you want to use to group traces in the console, or when calling the GetTraceSummaries API. 1) Annotations - are simple key-value pairs that are indexed for use with filter expressions.
