You Are Using a Configuration Management System to Manage Your

question 461

Multiple Choice

You are using a configuration management system to manage your Amazon EC2 instances. On your Amazon EC2 Instances, you want to store credentials for connecting to an Amazon RDS DB instance. How should you securely store these credentials?

• A) Give the Amazon EC2 instances an IAM role that allows read access to a private Amazon S3 bucket. Store a file with database credentials in the Amazon S3 bucket. Have your configuration management system pull the file from the bucket when it is needed.
• B) Launch an Amazon EC2 instance and use the configuration management system to bootstrap the instance with the Amazon RDS DB credentials. Create an AMI from this instance.
• C) Store the Amazon RDS DB credentials in Amazon EC2 user data. Import the credentials into the Instance on boot.
• D) Assign an IAM role to your Amazon RDS instance, and use this IAM role to access the Amazon RDS DB from your Amazon EC2 instances.
• E) Store your credentials in your version control system, in plaintext. Check out a copy of your credentials from the version control system on boot. Use Amazon EBS encryption on the volume storing the Amazon RDS DB credentials.

---

Definitions:

Core Management Group

The central team of decision-makers in an organization responsible for setting strategy, making critical operational decisions, and leading the organization towards its goals.

Authorization Card

A document that indicates an employee's willingness to be represented by a labor union in negotiations with their employer.

Representation Election

A voting process by which employees decide whether or not they wish to be represented by a labor union.

Organizing Campaign

Efforts aimed at rallying employees, typically for unionization or collective bargaining purposes.