Examkin

Question

Difficulty: MediumSecrets and Parameters Management

A SysOps administrator is managing configuration settings in AWS Systems Manager Parameter Store. A configuration parameter named `/prod/app/config` was created under the Standard parameter tier. The administrator needs to attach an Expiration parameter policy to this parameter to automatically delete it after an upcoming maintenance window. The administrator also wants to ensure that the parameter can be changed back to the Standard tier after the maintenance window to minimize ongoing costs. Which action should the administrator take to meet these requirements?

  1. Upgrade the parameter to the Advanced tier to apply the Expiration policy, and accept that the parameter cannot be downgraded back to the Standard tier.Answer
  2. B
    Apply the Expiration policy to the parameter under the Standard tier, provided that the parameter is encrypted using a customer managed KMS key and the KMS key policy allows Systems Manager access.
  3. C
    Configure an AWS Secrets Manager secret rotation Lambda function to periodically check and delete the parameter from the Standard tier once the maintenance window has passed.
  4. D
    Apply the Expiration policy to the Advanced tier, and attach an IAM role to the policy using the iam:PassRole permission to allow Parameter Store to delete the parameter.

Answer

Upgrade the parameter to the Advanced tier to apply the Expiration policy, and accept that the parameter cannot be downgraded back to the Standard tier.
The correct option is the one stating the parameter must be upgraded to the Advanced tier and cannot be downgraded. In AWS Systems Manager Parameter Store, parameter policies (such as Expiration) are only available in the Advanced tier. Upgrading a parameter from the Standard tier to the Advanced tier is a one-way operation; Parameter Store does not support downgrading an Advanced parameter back to the Standard tier.

Step-by-Step Solution

1
Identify the tier requirements for Parameter Store parameter policies.
Parameter policies (such as Expiration) are only supported in the Advanced parameter tier.
Standard parameters do not support parameter policies.
2
Determine the upgrade path from Standard to Advanced tier.
A parameter can be upgraded from the Standard tier to the Advanced tier at any time by updating its configuration.
To apply the Expiration policy, the parameter tier must be changed to Advanced.
3
Evaluate the feasibility of downgrading the parameter tier back to Standard.
AWS Systems Manager Parameter Store does not support downgrading an Advanced parameter to a Standard parameter.
Once upgraded to Advanced, it is a permanent change for that parameter name, meaning the administrator must accept that it cannot be reverted to the Standard tier.

Key Concept

Systems Manager Parameter Store Tiers and Parameter Policies
Estimated Time:1m 30s
Rate this question

Topics

Secrets and Parameters Management

More questions from this topic