DVA-C02 · Question #42
A company has a new application. The company needs to secure sensitive configuration data such as database connection strings, application license codes, and API keys that the application uses to…
The correct answer is B. Store the configuration data in AWS Systems Manager Parameter Store. Grant the application. https://aws.amazon.com/blogs/mt/the-right-way-to-store-secrets-using-parameter-store/ https://docs.aws.amazon.com/managedservices/latest/userguide/sys-man-param-store.html AWS Systems Manager Parameter Store (AMS SSPS): AWS Systems Manager Parameter Store provides secure…
Question
A company has a new application. The company needs to secure sensitive configuration data such as database connection strings, application license codes, and API keys that the application uses to access external resources. The company must track access to the configuration data for auditing purposes. The resources are managed outside the application. The company is not required to manage rotation of the connection strings, license codes, and API keys in the application. The company must implement a solution to securely store the configuration data and to give the application access to the configuration data. The solution must comply with security best practices. Which solution will meet these requirements MOST cost-effectively?
Options
- AStore the configuration data in an encrypted file on the source code bundle. Grant the application
- BStore the configuration data in AWS Systems Manager Parameter Store. Grant the application
- CStore the configuration data on an Amazon Elastic Block Store (Amazon EBS) encrypted volume.
- DStore the configuration data in AWS Secrets Manager. Grant the application access by using IAM
How the community answered
(23 responses)- A4% (1)
- B70% (16)
- C9% (2)
- D17% (4)
Explanation
https://aws.amazon.com/blogs/mt/the-right-way-to-store-secrets-using-parameter-store/ https://docs.aws.amazon.com/managedservices/latest/userguide/sys-man-param-store.html AWS Systems Manager Parameter Store (AMS SSPS): AWS Systems Manager Parameter Store provides secure, hierarchical storage for configuration data management and secrets management. You can store data such as passwords, database strings, and license codes as parameter values.
Community Discussion
No community discussion yet for this question.