CLF-C02 Question 101
Single answerA company needs to securely store API keys and database credentials for its applications running on AWS. Which AWS service is the MOST appropriate for this purpose?
- A
AWS Secrets Manager
- B
AWS Systems Manager Parameter Store
- C
Amazon S3 with public-read access
- D
AWS Key Management Service (KMS)
Show answer and explanation
Correct answer: A
Explanation
AWS Secrets Manager is the most appropriate service for securely storing and managing application secrets such as API keys and database credentials. It includes features like encryption at rest, fine-grained access control using IAM, and automatic secret rotation, making it well-suited for this use case.
- A. Correct.
AWS Secrets Manager is designed specifically for securely storing and managing secrets like API keys, database credentials, and other sensitive information. It also supports automatic secret rotation.
- B. Incorrect.
AWS Systems Manager Parameter Store can store configuration data and secrets, but it lacks some advanced features like automatic secret rotation provided by AWS Secrets Manager.
- C. Incorrect.
Amazon S3 with public-read access is not intended for storing sensitive credentials. Public-read access would expose sensitive information to anyone on the internet, which is a significant security risk.
- D. Incorrect.
AWS Key Management Service (KMS) is used for encrypting and managing cryptographic keys, not for storing credentials or secrets directly.