A Company's AWS Architecture Currently Uses Access Keys and Secret

question 476

Multiple Choice

A company's AWS architecture currently uses access keys and secret access keys stored on each instance to access AWS services. Database credentials are hard-coded on each instance. SSH keys for command-line remote access are stored in a secured Amazon S3 bucket. The company has asked its solutions architect to improve the security posture of the architecture without adding operational complexity. Which combination of steps should the solutions architect take to accomplish this? (Choose three.)

• A) Use Amazon EC2 instance profiles with an IAM role
• B) Use AWS Secrets Manager to store access keys and secret access keys
• C) Use AWS Systems Manager Parameter Store to store database credentials
• D) Use a secure fleet of Amazon EC2 bastion hosts for remote access
• E) Use AWS KMS to store database credentials
• F) Use AWS Systems Manager Session Manager for remote access

---

Definitions:

Non-current

Term used to describe assets or liabilities that are not expected to turn into cash, be consumed, or paid within one year or the operating cycle, whichever is longer.

Instalment Payments

Payments made periodically towards the settlement of a debt or purchase price, typically including interest.

Interest

The charge for borrowing money or the compensation paid to depositors on their deposits, usually expressed as an annual percentage rate.