A company has an existing application that has hardcoded database credentials. A developer needs to modify the existing application. The application is deployed in two AWS Regions with an active-passive failover configuration to meet company's disaster recovery strategy. The developer needs a solution to store the credentials outside the code. The solution must comply with the company's disaster recovery strategy. Which solution will meet these requirements in the MOST secure way?

Question

Accepted Answer

A. Store the credentials in AWS Secrets Manager in the primary Region. Enable secret replication to

Answer

B. Store credentials in AWS Systems Manager Parameter Store in the primary Region. Enable

Answer

C. Store credentials in a config file. Upload the config file to an S3 bucket in the primary Region.

Answer

D. Store credentials in a config file. Upload the config file to an Amazon Elastic File System (Amazon

A company has an existing application that has hardcoded database credentials. A developer needs to modify the existing application. The application is deployed in two AWS Regions with an…

Question

Options

How the community answered

Explanation

Community Discussion