An Application Running on Amazon EC2 Opens Connections to an Amazon

question 231

Multiple Choice

An application running on Amazon EC2 opens connections to an Amazon RDS SQL Server database. The developer does not want to store the user name and password for the database in the code. The developer would also like to automatically rotate the credentials. What is the MOST secure way to store and access the database credentials?

• A) Create an IAM role that has permissions to access the database. Attach the role to the EC2 instance.
• B) Use AWS Secrets Manager to store the credentials. Retrieve the credentials from Secrets Manager as needed.
• C) Store the credentials in an encrypted text file in an Amazon S3 bucket. Configure the EC2 instance's user data to download the credentials from Amazon S3 as the instance boots.
• D) Store the user name and password credentials directly in the source code. No further action is needed because the source code is stored in a private repository.

---

Definitions:

Statute of Frauds

A legal concept that requires certain types of contracts to be in writing and signed by all parties involved to be enforceable.

Written Contract

An agreement between two or more parties that is expressed in written form and is intended to be enforceable by law.

Statute of Frauds

The Statute of Frauds is a legal principle requiring certain types of contracts to be in writing and signed to be enforceable.

Partial-Performance Exception

A legal doctrine allowing enforcement of an oral contract, contrary to the Statute of Frauds, based on partial completion of agreed terms.