Examkin

Question

Difficulty: EasySecrets Management and Parameter Store

An application hosted on Amazon EC2 instances requires access to a database password that must be rotated every 30 days, as well as a non-sensitive external API endpoint URL that does not change. Which TWO of the following configurations should the developer use to manage these values securely and cost-effectively? (Select TWO.)

  1. Store the database password in AWS Secrets Manager and configure automatic rotation.Answer
  2. Store the API endpoint URL in Systems Manager Parameter Store as a Standard String parameter.Answer
  3. C
    Store the database password in Systems Manager Parameter Store, as Parameter Store natively supports automatic rotation of database credentials.
  4. D
    Hardcode the database password directly within the application's SDK client initialization code.
  5. E
    Store the API endpoint URL in AWS Secrets Manager to utilize Secrets Manager's automatic rotation feature for static endpoints.

Answer

Store the database password in AWS Secrets Manager and configure automatic rotation, and store the API endpoint URL in Systems Manager Parameter Store as a Standard String parameter.
The correct options are to store the database password in AWS Secrets Manager and configure automatic rotation, and store the API endpoint URL in Systems Manager Parameter Store as a Standard String parameter. This ensures sensitive passwords are encrypted and rotated automatically, while non-sensitive parameters are stored cost-effectively in Parameter Store without incurring extra charges.

Step-by-Step Solution

1
Analyze the requirements for the database password.
The database password is a sensitive credential and requires rotation every 30 days.
AWS Secrets Manager is the optimal service because it securely stores secrets and provides built-in rotation integration.
2
Analyze the requirements for the API endpoint URL.
The API endpoint URL is non-sensitive and static (does not change or rotate).
Systems Manager Parameter Store is the most cost-effective solution for non-sensitive configuration parameters.

Key Concept

Distinction between AWS Secrets Manager and Systems Manager Parameter Store
Estimated Time:1m 0s
Rate this question

Topics

Secrets Management and Parameter Store

More questions from this topic