A security engineer is checking an AWS CloudFormation template for vulnerabilities. The security engineer finds a parameter that has a default value that exposes an application's API key in plaintext. The parameter is referenced several times throughout the template. The security engineer must replace the parameter while maintaining the ability to reference the value in the template. Which solution will meet these requirements in the MOST secure way?

Question

Accepted Answer

B. Store the API key value in AWS Secrets Manager. In the template, replace all references to the

Answer

A. Store the API key value as a SecureString parameter in AWS Systems Manager Parameter

Answer

C. Store the API key value in Amazon DynamoDB. In the template, replace all references to the

Answer

D. Store the API key value in a new Amazon S3 bucket. In the template, replace all references to the

A security engineer is checking an AWS CloudFormation template for vulnerabilities. The security engineer finds a parameter that has a default value that exposes an application's API key in…

Question

Options

How the community answered

Explanation

Topics

Community Discussion