A company has Linux-based Amazon EC2 instances. Users must access the instances by using SSH with EC2 SSH key pairs. Each machine requires a unique EC2 key pair. The company wants to implement a key rotation policy that will, upon request, automatically rotate all the EC2 key pairs and keep the keys in a securely encrypted place. The company will accept less than 1 minute of downtime during key rotation. Which solution will meet these requirements?

Question

Accepted Answer

A. Store all the keys in AWS Secrets Manager. Define a Secrets Manager rotation schedule to

Answer

B. Store all the keys in Parameter Store, a capability of AWS Systems Manager, as a string. Define

Answer

C. Import the EC2 key pairs into AWS Key Management Service (AWS KMS). Configure automatic

Answer

D. Add all the EC2 instances to Fleet Manager, a capability of AWS Systems Manager. Define a

A company has Linux-based Amazon EC2 instances. Users must access the instances by using SSH with EC2 SSH key pairs. Each machine requires a unique EC2 key pair. The company wants to implement a key…

Question

Options

How the community answered

Explanation

Community Discussion