Soru

Zorluk: KolayAWS CloudFormation

A developer is deploying a web application with a database backend using an AWS CloudFormation stack. The developer wants to ensure that the database credentials are managed securely and that the stack resources do not become inconsistent due to manual configurations. Which of the following actions should the developer take to achieve this? (Select TWO.)

  1. Store the database credentials in AWS Secrets Manager and retrieve them in the template using dynamic references.Cevap
  2. Update the database and application configurations by modifying the CloudFormation template and performing a stack update rather than making manual changes.Cevap
  3. C
    Store the database credentials as plaintext parameters in Systems Manager Parameter Store to avoid the cost of Secrets Manager.
  4. D
    Modify resource configurations directly in the AWS Management Console and execute drift detection to automatically synchronize the CloudFormation template.
  5. E
    Hardcode the database credentials in the application source code and pass the developer's AWS access keys directly to the instance configuration.

Cevap

Store the database credentials in AWS Secrets Manager and retrieve them using dynamic references, and update stack configurations by modifying the CloudFormation template and performing a stack update.
The correct options are to store database credentials in AWS Secrets Manager and reference them using dynamic references, and to perform configuration updates via CloudFormation template updates rather than manual console changes. This ensures credential security and maintains the stack integrity as the source of truth.

Adım Adım Çözüm

1
Identify the secure storage mechanism for credentials.
AWS Secrets Manager is chosen to store database credentials securely.
Storing credentials in Secrets Manager with dynamic references prevents plaintext exposure in templates.
2
Determine the correct method for modifying stack resources.
Modify the CloudFormation template and perform a stack update instead of making manual changes.
This prevents configuration drift and ensures the template remains the single source of truth.

Anahtar Kavram

CloudFormation configuration drift management and secure parameter reference.
Bu soruyu puanla