A company is building an application on AWS that connects to an Amazon RDS database. The company wants to manage the application configuration and to securely store and retrieve credentials for the…

Question

Options

• AUse AWS AppConfig to store and manage the application configuration. Use AWS Secrets
• BUse AWS Lambda to store and manage the application configuration. Use AWS Systems
• CUse an encrypted application configuration file Store the file in Amazon S3 for the application
• DUse AWS AppConfig to store and manage the application configuration. Use Amazon RDS to

• A
  87% (26)
• B
  3% (1)
• C
  7% (2)
• D
  3% (1)

Explanation

This solution meets the company's requirements with minimal administrative overhead and ensures security and ease of management. AWS AppConfig: AWS AppConfig is a service designed to manage application configuration in a secure and validated way. It allows you to deploy configurations safely and quickly without affecting the application's performance or availability. AWS Secrets Manager: AWS Secrets Manager is specifically designed to manage, retrieve, and rotate credentials for databases and other services. It integrates seamlessly with AWS services like Amazon RDS, making it an ideal solution for securely storing and retrieving database credentials. Secrets Manager also provides automatic rotation of credentials, reducing the operational burden. Why Not Other Options?: Option B (AWS Lambda + Parameter Store): While AWS Lambda can be used for managing configurations and AWS Systems Manager Parameter Store can store credentials, this approach involves more manual setup and does not offer the same level of integrated management and security as AppConfig and Secrets Manager. Option C (Encrypted S3 Configuration File): Storing configuration and credentials in S3 files involves more manual management and security considerations, increasing the administrative Option D (AppConfig + RDS for credentials): RDS is not designed for storing application credentials; it's better suited for managing database instances and their configurations.

No community discussion yet for this question.