Examkin

Soru

Zorluk: KolaySecrets Management and Parameter Store

A developer is implementing a microservice that integrates with an external service provider. The integration requires a sensitive API key that needs to be rotated automatically every 90 days. Which AWS service should the developer use to store this API key and handle its automatic rotation?

  1. A
    AWS Systems Manager Parameter Store
  2. B
    AWS Key Management Service (AWS KMS)
  3. AWS Secrets ManagerCevap
  4. D
    Hardcode the API key in the application source code

Cevap

AWS Secrets Manager is the correct service to use because it is specifically designed to store sensitive API keys and supports automated rotation using AWS Lambda.
AWS Secrets Manager is designed to store secrets and credentials securely. It has native support for automatic rotation of secrets using built-in templates or custom AWS Lambda functions.

Adım Adım Çözüm

1
Identify the primary requirement.
The requirement is to store a sensitive API key and automatically rotate it every 90 days.
This helps determine which AWS service supports both secure storage and automatic lifecycle management.
2
Compare candidate AWS services.
AWS Secrets Manager provides built-in integration with Lambda for automatic secret rotation. Systems Manager Parameter Store does not support automated rotation out of the box. AWS KMS manages cryptographic keys, not the secret payloads themselves.
Choosing the service with native rotation capability minimizes custom development and operational overhead.

Anahtar Kavram

Choosing between AWS Secrets Manager and Systems Manager Parameter Store based on security and rotation requirements.
Tahmini Süre:45s
Bu soruyu puanla

Konular

Secrets Management and Parameter Store

Bu konudan daha fazla soru