SAA-C03 · Question #85
A company is designing a new internal web application in the AWS Cloud. The new application must securely retrieve and store multiple employee usernames and passwords from an AWS managed service. Whic
The correct answer is D. Store the employee credentials in AWS Secrets Manager. Use AWS Cloud Formation and the. AWSSecrets Manageris the best solution for securely storing and managing sensitive information, such as usernames and passwords. Secrets Manager provides automatic rotation, fine-grained access control, and encryption of credentials. It is designed to integrate easily with other
Question
A company is designing a new internal web application in the AWS Cloud. The new application must securely retrieve and store multiple employee usernames and passwords from an AWS managed service. Which solution will meet these requirements with the LEAST operational overhead?
Options
- AStore the employee credentials in AWS Systems Manager Parameter Store. Use AWS Cloud
- BStore the employee credentials in AWS Secrets Manager. Use AWS Cloud Formation and AWS
- CStore the employee credentials in AWS Systems Manager Parameter Store. Use AWS Cloud
- DStore the employee credentials in AWS Secrets Manager. Use AWS Cloud Formation and the
How the community answered
(53 responses)- A2% (1)
- B4% (2)
- C2% (1)
- D92% (49)
Explanation
AWSSecrets Manageris the best solution for securely storing and managing sensitive information, such as usernames and passwords. Secrets Manager provides automatic rotation, fine-grained access control, and encryption of credentials. It is designed to integrate easily with other AWS services, such as CloudFormation, to automate the retrieval of secrets via theBatchGetSecretValue API. Secrets Manager has a lower operational overhead than manually managing credentials, and it offers features like automatic secret rotation that reduce the need for human intervention. Option A and C (Parameter Store): While Systems Manager Parameter Store can store secrets, Secrets Manager provides more specialized capabilities for securely managing and rotating credentials with less operational overhead. Option B and C (AWS Batch): Introducing AWS Batch unnecessarily complicates the solution. Secrets Manager already provides simple API calls for retrieving secrets without needing an additional service.
Community Discussion
No community discussion yet for this question.