DVA-C02 · Question #563
A developer is building an application that consists of many AWS Lambda functions. The Lambda functions connect to a single Amazon RDS database. The developer needs to implement a solution to store…
The correct answer is A. Store the credentials as a secret in AWS Secrets Manager. Access the secret at runtime from. AWS Secrets Manager is specifically designed to securely store and manage sensitive information, such as database credentials. You can store the credentials as a secret and access them dynamically at runtime from within your Lambda functions. Secrets Manager also supports…
Question
A developer is building an application that consists of many AWS Lambda functions. The Lambda functions connect to a single Amazon RDS database. The developer needs to implement a solution to store the database credentials securely. When the credentials are updated, the Lambda functions must be able to use the new credentials without requiring a code update or a configuration update. Which solution will meet these requirements?
Options
- AStore the credentials as a secret in AWS Secrets Manager. Access the secret at runtime from
- BStore the credentials as a secret in AWS Secrets Manager. Access the credentials in environment
- CStore the credentials as a SecureString parameter in AWS Systems Manager Parameter Store.
- DStore the credentials as a SecureString parameter in AWS Systems Manager Parameter Store.
How the community answered
(32 responses)- A72% (23)
- B16% (5)
- C9% (3)
- D3% (1)
Explanation
AWS Secrets Manager is specifically designed to securely store and manage sensitive information, such as database credentials. You can store the credentials as a secret and access them dynamically at runtime from within your Lambda functions. Secrets Manager also supports automatic rotation of secrets, so when the credentials are updated, the Lambda functions can access the updated credentials without needing a code or configuration update. This is the best solution for managing credentials securely and allowing Lambda functions to access them with minimal operational overhead.
Community Discussion
No community discussion yet for this question.