DVA-C02 Question 165
Single answerA developer is building a serverless application on AWS and needs to store application configuration settings that should be securely accessible by multiple Lambda functions. The configuration must allow versioning and support encryption for sensitive data. Which AWS service should the developer use?
- A
AWS Secrets Manager
- B
AWS Systems Manager Parameter Store
- C
Amazon S3
- D
Amazon DynamoDB
Show answer and explanation
Correct answer: B
Explanation
AWS Systems Manager Parameter Store is the ideal service for securely storing application configuration settings. It supports versioning, encryption using AWS KMS, and is easy to integrate with Lambda functions and other AWS services. While AWS Secrets Manager is great for managing sensitive secrets, it is not optimized for general configuration storage with versioning.
- A. Incorrect.
AWS Secrets Manager is designed for storing secrets like database credentials and API keys, but it is not the best service for general application configuration settings with versioning support.
- B. Correct.
AWS Systems Manager Parameter Store is the correct choice as it allows you to store configuration settings and secrets, supports versioning, and provides encryption using AWS KMS.
- C. Incorrect.
Amazon S3 is used for object storage and is not designed for storing application configuration settings or secrets.
- D. Incorrect.
Amazon DynamoDB is a NoSQL database service, primarily used for fast and flexible data storage, but it is not designed specifically for managing application configuration settings.