A Company Is Developing an Application That Will Run on Several

question 428

Multiple Choice

A company is developing an application that will run on several Amazon EC2 instances in an Auto Scaling group and can access a database running on Amazon EC2. The application needs to store secrets required to connect to the database. The application must allow for periodic secret rotation, and there should be no changes to the application when a secret changes. What is the SAFEST way to meet these requirements?

• A) Associate an IAM role to the EC2 instance where the application is running with permission to access the database.
• B) Use AWS Systems Manager Parameter Store with the SecureString data type to store secrets. Use AWS Systems Manager Parameter Store with the SecureString data type to store secrets.
• C) Configure the application to store secrets in Amazon S3 object metadata.
• D) Hard code the database secrets in the application code itself.

---

Definitions:

Tacit Knowledge

Refers to personal, context-specific knowledge that is difficult to formalize and communicate, often acquired through personal experience.

Explicit Knowledge

Information or knowledge that is easily articulated, codified, and transferred among individuals, often documented in manuals, databases, and procedures.

Business Dimension

An aspect or perspective through which business activities can be analyzed or measured, such as profitability, growth, or customer satisfaction.

Data Mart

A specialized storage system or database designed for analytical tasks, often focusing on a specific area or department within an organization.