SAA-C03 · Question #717
A company is developing a web application that requires secure storage for database credentials and API tokens. The application runs on Amazon EC2 instances. The company must ensure that the secrets…
The correct answer is C. Store the secrets in AWS Secrets Manager. Configure automatic rotation of the credentials. AWS Secrets Manager provides secure storage for credentials and API tokens and supports automatic rotation without requiring changes to the application code. Retrieving secrets at runtime via the AWS SDK ensures the application always uses the latest credentials, minimizing…
Question
A company is developing a web application that requires secure storage for database credentials and API tokens. The application runs on Amazon EC2 instances. The company must ensure that the secrets are securely stored. The company must be able to rotate the secrets without updating the application code. Which solution will meet these requirements with the LEAST operational overhead?
Options
- AStore the secrets in AWS Systems Manager Parameter Store by using secure string parameters.
- BUse environment variables on each EC2 instance to store the secrets. Apply an IAM policy that
- CStore the secrets in AWS Secrets Manager. Configure automatic rotation of the credentials.
- DPlace the secrets in a local configuration file on each EC2 instance. Encrypt the files by using an
How the community answered
(26 responses)- A4% (1)
- B12% (3)
- C81% (21)
- D4% (1)
Explanation
AWS Secrets Manager provides secure storage for credentials and API tokens and supports automatic rotation without requiring changes to the application code. Retrieving secrets at runtime via the AWS SDK ensures the application always uses the latest credentials, minimizing operational overhead.
Community Discussion
No community discussion yet for this question.