A Devops Team Uses AWS CloudFormation to Build Their Infrastructure

question 455

Multiple Choice

A devops team uses AWS CloudFormation to build their infrastructure. The security team is concerned about sensitive parameters, such as passwords, being exposed. Which combination of steps will enhance the security of AWS CloudFormation? (Choose three.)

• A) Create a secure string with AWS KMS and choose a KMS encryption key. Reference the ARN of the secure string, and give AWS CloudFormation permission to the KMS key for decryption.
• B) Create secrets using the AWS Secrets Manager AWS::SecretsManager::Secret resource type. Reference the secret resource return attributes in resources that need a password, such as an Amazon RDS database.
• C) Store sensitive static data as secure strings in the AWS Systems Manager Parameter Store. Use dynamic references in the resources that need access to the data.
• D) Store sensitive static data in the AWS Systems Manager Parameter Store as strings. Reference the stored value using types of Systems Manager parameters.
• E) Use AWS KMS to encrypt the CloudFormation template.
• F) Use the CloudFormation NoEcho parameter property to mask the parameter value.

---

Definitions:

Reducing Turnover

Strategies or practices intended to decrease the rate at which employees leave and have to be replaced within an organization.

Expectancy Theory

A motivational theory suggesting that individuals are more likely to act in a certain way if they expect that the action will lead to a desired outcome or reward.

Motivation

A psychological force that compels individuals to act toward the achievement of goals.

Attractiveness

The qualities or features of an entity that make it appealing or desirable to others.