Examkin

Question

Difficulty: EasySecrets Management and Parameter Store

A developer is implementing a microservice that integrates with an external service provider. The integration requires a sensitive API key that needs to be rotated automatically every 90 days. Which AWS service should the developer use to store this API key and handle its automatic rotation?

  1. A
    AWS Systems Manager Parameter Store
  2. B
    AWS Key Management Service (AWS KMS)
  3. AWS Secrets ManagerAnswer
  4. D
    Hardcode the API key in the application source code

Answer

AWS Secrets Manager is the correct service to use because it is specifically designed to store sensitive API keys and supports automated rotation using AWS Lambda.
AWS Secrets Manager is designed to store secrets and credentials securely. It has native support for automatic rotation of secrets using built-in templates or custom AWS Lambda functions.

Step-by-Step Solution

1
Identify the primary requirement.
The requirement is to store a sensitive API key and automatically rotate it every 90 days.
This helps determine which AWS service supports both secure storage and automatic lifecycle management.
2
Compare candidate AWS services.
AWS Secrets Manager provides built-in integration with Lambda for automatic secret rotation. Systems Manager Parameter Store does not support automated rotation out of the box. AWS KMS manages cryptographic keys, not the secret payloads themselves.
Choosing the service with native rotation capability minimizes custom development and operational overhead.

Key Concept

Choosing between AWS Secrets Manager and Systems Manager Parameter Store based on security and rotation requirements.
Estimated Time:45s
Rate this question

Topics

Secrets Management and Parameter Store

More questions from this topic