DVA-C02 · Question #195
DVA-C02 Question #195: Real Exam Question with Answer & Explanation
The correct answer is C: Store the credentials in AWS Systems Manager Parameter Store as a secure string parameter.. AWS Systems Manager Parameter Store offers a more centralized way to manage encrypted secrets across multiple services than Lambda environment variables, making it a better fit for this
Question
A company has an application that runs as a series of AWS Lambda functions. Each Lambda function receives data from an Amazon Simple Notification Service (Amazon SNS) topic and writes the data to an Amazon Aurora DB instance. To comply with an information security policy, the company must ensure that the Lambda functions all use a single securely encrypted database connection string to access Aurora. Which solution will meet these requirements?
Options
- AUse IAM database authentication for Aurora to enable secure database connections for all the
- BStore the credentials and read the credentials from an encrypted Amazon RDS DB instance.
- CStore the credentials in AWS Systems Manager Parameter Store as a secure string parameter.
- DUse Lambda environment variables with a shared AWS Key Management Service (AWS KMS)
Explanation
AWS Systems Manager Parameter Store offers a more centralized way to manage encrypted secrets across multiple services than Lambda environment variables, making it a better fit for this
Community Discussion
No community discussion yet for this question.