A developer is deploying a web application with a database backend using an AWS CloudFormation stack. The developer wants to ensure that the database credentials are managed securely and that the stack resources do not become inconsistent due to manual configurations. Which of the following actions should the developer take to achieve this? (Select TWO.)
- Store the database credentials in AWS Secrets Manager and retrieve them in the template using dynamic references.Cevap
- Update the database and application configurations by modifying the CloudFormation template and performing a stack update rather than making manual changes.Cevap
- CStore the database credentials as plaintext parameters in Systems Manager Parameter Store to avoid the cost of Secrets Manager.
- DModify resource configurations directly in the AWS Management Console and execute drift detection to automatically synchronize the CloudFormation template.
- EHardcode the database credentials in the application source code and pass the developer's AWS access keys directly to the instance configuration.
Cevap
Store the database credentials in AWS Secrets Manager and retrieve them using dynamic references, and update stack configurations by modifying the CloudFormation template and performing a stack update.
The correct options are to store database credentials in AWS Secrets Manager and reference them using dynamic references, and to perform configuration updates via CloudFormation template updates rather than manual console changes. This ensures credential security and maintains the stack integrity as the source of truth.
Adım Adım Çözüm
Anahtar Kavram
CloudFormation configuration drift management and secure parameter reference.