DVA-C02 Question 293
Select 3You are developing a serverless application in AWS that requires dynamic configuration values and secure database credentials. You decide to use AWS AppConfig for managing application configurations and AWS Secrets Manager for storing sensitive credentials. What is the most secure and reliable way to retrieve these values in your application code?
- A
Use the AWS SDK to fetch parameters from AWS AppConfig and Secrets Manager during application startup.
- B
Store the configuration and secret values in environment variables at deployment time.
- C
Use an IAM role with appropriate permissions to allow your application to access AWS AppConfig and Secrets Manager.
- D
Cache the fetched configuration and secret values in memory for improved performance during runtime.
- E
Hardcode the configuration and secret values in the application code for simplicity.
Show answer and explanation
Correct answers: A, C, D
Explanation
The correct approach involves using the AWS SDK to fetch configuration and secret values dynamically, assigning an IAM role with appropriate permissions for secure access, and caching values in memory to enhance performance. These practices ensure security, scalability, and efficiency while adhering to AWS best practices.
- A. Correct.
Using the AWS SDK is the recommended way to programmatically fetch values from AWS AppConfig and Secrets Manager, as it allows real-time updates and ensures secure access.
- B. Incorrect.
Storing configuration and secrets in environment variables can pose risks if not managed properly and doesn't support dynamic updates, making it less reliable.
- C. Correct.
Assigning an appropriate IAM role to the application is crucial to securely access AWS services without hardcoding credentials.
- D. Correct.
Caching configuration and secret values in memory can improve runtime performance and reduce the frequency of requests to AWS services.
- E. Incorrect.
Hardcoding sensitive information in application code is a bad practice and violates security best practices.