An Application Running on Amazon EC2 Opens Connections to an Amazon

question 231

Multiple Choice

An application running on Amazon EC2 opens connections to an Amazon RDS SQL Server database. The developer does not want to store the user name and password for the database in the code. The developer would also like to automatically rotate the credentials. What is the MOST secure way to store and access the database credentials?

• A) Create an IAM role that has permissions to access the database. Attach the role to the EC2 instance.
• B) Use AWS Secrets Manager to store the credentials. Retrieve the credentials from Secrets Manager as needed.
• C) Store the credentials in an encrypted text file in an Amazon S3 bucket. Configure the EC2 instance's user data to download the credentials from Amazon S3 as the instance boots.
• D) Store the user name and password credentials directly in the source code. No further action is needed because the source code is stored in a private repository.

---

Definitions:

Primary Beneficiary

The main individual or entity designated to receive the benefits or payouts from an insurance policy, trust, or other financial instrument.

Consolidated

Referring to the financial statements that combine the financial information of a parent company with its subsidiaries to present as a single entity.

IFRS

International Financial Reporting Standards, a set of accounting standards developed by the International Accounting Standards Board for global use.

AFS-Debt Securities

Available-For-Sale Debt Securities are debt investments not classified as held-to-maturity or trading securities and can be sold before maturity.