Examkin

Question

Difficulty: EasySecrets Management and Parameter Store

A development team needs to store a collection of third-party API keys that will be accessed by several serverless applications. These keys must be encrypted at rest, but they do not require automatic rotation or cross-account access. The team wants a solution that minimizes storage and retrieval costs.

Which AWS service or feature should the developer select to store these API keys?

  1. Systems Manager Parameter Store using SecureString parametersAnswer
  2. B
    AWS Secrets Manager
  3. C
    Hardcoding the API keys directly within the Lambda function client initialization code
  4. D
    Storing the API keys as plaintext in Systems Manager Parameter Store using String parameters

Answer

Systems Manager Parameter Store using SecureString parameters
Systems Manager Parameter Store using SecureString parameters is the correct choice because it provides secure, encrypted storage for configuration data and secrets at no additional cost for standard parameters. Since the API keys do not require automatic rotation or cross-account access, using Parameter Store is the most cost-effective and operationally efficient solution.

Step-by-Step Solution

1
Analyze the requirements for storing the third-party API keys.
The API keys must be encrypted at rest, accessed by multiple serverless applications, do not require automatic rotation, and the solution must minimize storage and retrieval costs.
Understanding the technical constraints helps in selecting the most cost-effective and secure AWS service.
2
Compare AWS Systems Manager Parameter Store and AWS Secrets Manager against the requirements.
Parameter Store (SecureString) offers free/cost-effective secure storage without automatic rotation. Secrets Manager supports automatic rotation but introduces a monthly cost per secret.
Both services support encryption, but Parameter Store is the more cost-effective choice for secrets that do not require rotation.
3
Select the correct service and parameter type.
Systems Manager Parameter Store using SecureString parameters satisfies both the security and cost-efficiency requirements.
Using SecureString parameters ensures the API keys are encrypted at rest using KMS while remaining cost-effective.

Key Concept

Selecting between Parameter Store and Secrets Manager based on rotation requirements and cost efficiency.
Estimated Time:1m 0s
Rate this question

Topics

Secrets Management and Parameter Store

More questions from this topic