DVA-C02 · Question #169
A developer maintains applications that store several secrets in AWS Secrets Manager. The applications use secrets that have changed over time. The developer needs to identify required secrets that ar
The correct answer is B. Create a secretsmanager-secret-unused AWS Config managed rule. Create an Amazon. Solution (B) is the best option to meet the developer's requirements. It allows the developer to identify necessary secrets that are still in use without causing any application downtime.
Question
A developer maintains applications that store several secrets in AWS Secrets Manager. The applications use secrets that have changed over time. The developer needs to identify required secrets that are still in use. The developer does not want to cause any application downtime. What should the developer do to meet these requirements?
Options
- AConfigure an AWS CloudTrail log file delivery to an Amazon S3 bucket. Create an Amazon
- BCreate a secretsmanager-secret-unused AWS Config managed rule. Create an Amazon
- CDeactivate the applications secrets and monitor the applications error logs temporarily.
- DConfigure AWS X-Ray for the applications. Create a sampling rule to match the GetSecretValue
How the community answered
(43 responses)- A14% (6)
- B77% (33)
- C7% (3)
- D2% (1)
Explanation
Solution (B) is the best option to meet the developer's requirements. It allows the developer to identify necessary secrets that are still in use without causing any application downtime.
Community Discussion
No community discussion yet for this question.