CLF-C02 Question 100
Single answerAn organization wants to securely store database credentials to be accessed by an application running on Amazon EC2 instances. The team also wants to automatically rotate the credentials periodically. Which AWS service should they use to achieve this?
- A
AWS Secrets Manager
- B
AWS Systems Manager Parameter Store
- C
Amazon S3 with encryption enabled
- D
AWS Identity and Access Management (IAM)
Show answer and explanation
Correct answer: A
Explanation
AWS Secrets Manager is the best service for securely storing sensitive information, such as database credentials, while providing the ability to automatically rotate them. This makes it ideal for use cases where security and automation are critical. Other options, such as AWS Systems Manager Parameter Store or Amazon S3, lack the specific features required for this scenario.
- A. Correct.
AWS Secrets Manager is specifically designed for storing sensitive information, such as database credentials, API keys, and other secrets. It also supports automatic key rotation, which meets the organization's requirement.
- B. Incorrect.
AWS Systems Manager Parameter Store can securely store parameters and secrets, but it does not natively support automatic rotation of secrets. Thus, it does not fully meet the requirements.
- C. Incorrect.
Amazon S3 with encryption enabled can store sensitive data but is not designed for managing and rotating secrets securely. It is not an appropriate choice for this use case.
- D. Incorrect.
AWS Identity and Access Management (IAM) is used to manage access to AWS resources and does not provide functionality for storing or rotating credentials.