DVA-C02 Question 222
Select 3A developer is building a microservices-based application that requires secure access to configuration data and sensitive credentials. The application is deployed on Amazon ECS Fargate, and the developer wants to ensure that the configuration can be updated dynamically without redeploying the containers. Which combination of options will meet these requirements?
- A
Store configuration settings in AWS AppConfig and use the AppConfig integration with AWS SDK to retrieve the configuration dynamically.
- B
Store sensitive credentials in AWS Secrets Manager and retrieve them programmatically using the AWS SDK.
- C
Embed configuration data and credentials directly into the container image for faster access.
- D
Use AWS Systems Manager Parameter Store to store configuration data and retrieve it dynamically using the Parameter Store API.
- E
Retrieve configuration data from Amazon S3 by storing a JSON file with settings and downloading it at runtime.
Show answer and explanation
Correct answers: A, B, D
Explanation
The combination of AWS AppConfig, Secrets Manager, and Parameter Store provides a secure and dynamic way to manage application configuration data and sensitive credentials. AWS AppConfig is ideal for dynamic configuration updates, Secrets Manager is designed for securely storing and retrieving sensitive credentials, and Parameter Store provides a secure and managed way to store and retrieve parameters or configuration data. Embedding data in container images is insecure and inflexible, while using Amazon S3 lacks the dynamic and security-focused features provided by the other services.
- A. Correct.
This is correct. AWS AppConfig is designed for dynamic configuration management and allows applications to retrieve updated configurations without requiring redeployment.
- B. Correct.
This is correct. AWS Secrets Manager is specifically designed for securely storing and retrieving sensitive credentials programmatically.
- C. Incorrect.
This is incorrect. Embedding configuration data and credentials directly into the container image is not secure and requires redeployment if the configuration changes.
- D. Correct.
This is correct. AWS Systems Manager Parameter Store allows secure storage and dynamic retrieval of configuration data for applications.
- E. Incorrect.
This is incorrect. While Amazon S3 can store configuration files, it does not provide features for dynamic updates or built-in security mechanisms like AWS AppConfig or Parameter Store.