SAP-C02 Question 247
Single answerA company wants to implement a highly secure solution for managing and rotating credentials for their on-premises applications that need access to AWS services. The solution should minimize the need for manual intervention and integrate seamlessly with IAM policies to enforce fine-grained access control. Which AWS service or feature should the company use?
- A
AWS Secrets Manager
- B
Amazon Cognito
- C
AWS Key Management Service (KMS)
- D
AWS Systems Manager Parameter Store
Show answer and explanation
Correct answer: A
Explanation
AWS Secrets Manager is the correct answer because it is specifically designed for securely managing, retrieving, and rotating credentials, including those for on-premises applications accessing AWS. It also integrates seamlessly with IAM for fine-grained access control, fulfilling the requirements outlined in the scenario.
- A. Correct.
AWS Secrets Manager is designed specifically for managing, retrieving, and rotating credentials securely. It integrates well with IAM policies, allowing fine-grained access control, and supports automatic rotation of secrets.
- B. Incorrect.
Amazon Cognito is primarily used for managing user authentication and authorization for web and mobile applications, not for managing credentials for on-premises applications accessing AWS resources.
- C. Incorrect.
AWS Key Management Service (KMS) is used for managing encryption keys, not for managing and rotating application credentials.
- D. Incorrect.
AWS Systems Manager Parameter Store can store configuration values and secrets, but it does not natively support automatic rotation of credentials, making it less suited for this use case.