A developer is managing an AWS CloudFormation stack. The developer needs to update the stack template to add a new Amazon DynamoDB table, store a database password that requires automatic rotation, and store a non-sensitive configuration parameter. Which of the following actions should the developer take to accomplish this? (Select TWO.)
- Store the database password in AWS Secrets Manager.Cevap
- Store the non-sensitive configuration parameter in AWS Systems Manager Parameter Store.Cevap
- CStore the non-sensitive configuration parameter in AWS Secrets Manager to reduce management overhead.
- DCreate the DynamoDB table manually in the AWS Console before updating the CloudFormation stack.
- EManually delete the resources directly in the console during a rollback state to force stack recovery.
Cevap
The developer should store the database password in AWS Secrets Manager and store the non-sensitive configuration parameter in Systems Manager Parameter Store.
The correct options are storing the database password in AWS Secrets Manager and storing the non-sensitive configuration parameter in AWS Systems Manager Parameter Store. Secrets Manager provides built-in rotation capabilities, which meets the security requirement, while Parameter Store is a cost-effective solution for non-sensitive data.
Adım Adım Çözüm
Anahtar Kavram
Distinguishing between AWS Secrets Manager and Systems Manager Parameter Store for storing CloudFormation parameters.