SAA-C03 · Question #729
A company runs a backend service on Amazon EC2 instances that run Amazon Linux. The backend service depends on JSON documents that contain sensitive information, such as API keys stored locally on…
The correct answer is C. Create individual secrets that contain each API key in AWS Secrets Manager. Modify the. AWS Secrets Manager allows storing individual API keys as separate secrets with fine-grained, role-based access controls. Secrets Manager supports automatic replication to multiple Regions, ensuring compliance with the requirement for multi-Region availability and secure…
Question
A company runs a backend service on Amazon EC2 instances that run Amazon Linux. The backend service depends on JSON documents that contain sensitive information, such as API keys stored locally on the file system of each instance. A solutions architect needs to design a solution that stores this information securely. The solution must provide role-based and fine-grained access to individual API keys. The company’s compliance policy requires that all sensitive information is available in more than one AWS Region. Which solution will meet these requirements?
Options
- AMount the EC2 instance to an Amazon Elastic File System (Amazon EFS) file system distributed
- BTransfer the documents to an Amazon DocumentDB database. Modify the backend service to
- CCreate individual secrets that contain each API key in AWS Secrets Manager. Modify the
- DCopy the documents to an Amazon S3 bucket that has client-side encryption enabled. Modify the
How the community answered
(58 responses)- A10% (6)
- B5% (3)
- C83% (48)
- D2% (1)
Explanation
AWS Secrets Manager allows storing individual API keys as separate secrets with fine-grained, role-based access controls. Secrets Manager supports automatic replication to multiple Regions, ensuring compliance with the requirement for multi-Region availability and secure, centralized management of sensitive information.
Community Discussion
No community discussion yet for this question.