Examkin

Soru

Zorluk: KolaySecrets and Parameter Management

A solutions architect needs to store a database password for a web application. The password must be encrypted at rest, but the application does not require automatic password rotation. The solutions architect wants to choose the most cost-effective storage option. Which AWS service should be used to meet these requirements?

  1. AWS Systems Manager Parameter Store with a SecureString parameterCevap
  2. B
    AWS Systems Manager Parameter Store with a String parameter
  3. C
    AWS Key Management Service (AWS KMS) key policies to directly store the database password
  4. D
    Amazon S3 Standard-Infrequent Access (S3 Standard-IA) to store the database password file

Cevap

AWS Systems Manager Parameter Store with a SecureString parameter
Using AWS Systems Manager Parameter Store with a SecureString parameter satisfies the requirement to encrypt the database password at rest using AWS KMS. Since the application does not require automatic credential rotation, standard Parameter Store parameters are the most cost-effective choice as they are offered at no additional cost.

Adım Adım Çözüm

1
Analyze the requirements for the secret database password.
The secret must be stored with encryption at rest, but automatic rotation is not required.
This rules out the necessity of AWS Secrets Manager's automatic rotation, allowing the use of simpler, free alternatives like Systems Manager Parameter Store.
2
Compare Systems Manager Parameter Store parameter types.
Parameter Store standard parameters are free of charge. A SecureString parameter type integrates with AWS KMS to encrypt the value at rest.
This securely encrypts the secret at rest without incurring the monthly secret hosting fees associated with AWS Secrets Manager.

Anahtar Kavram

AWS Systems Manager Parameter Store SecureString parameters provide a free and secure storage mechanism for sensitive configuration data and passwords when automated rotation is not needed.
Tahmini Süre:45s
Bu soruyu puanla

Konular

Secrets and Parameter Management

Bu konudan daha fazla soru