A Devops Team Uses AWS CloudFormation to Build Their Infrastructure

question 455

Multiple Choice

A devops team uses AWS CloudFormation to build their infrastructure. The security team is concerned about sensitive parameters, such as passwords, being exposed. Which combination of steps will enhance the security of AWS CloudFormation? (Choose three.)

• A) Create a secure string with AWS KMS and choose a KMS encryption key. Reference the ARN of the secure string, and give AWS CloudFormation permission to the KMS key for decryption.
• B) Create secrets using the AWS Secrets Manager AWS::SecretsManager::Secret resource type. Reference the secret resource return attributes in resources that need a password, such as an Amazon RDS database.
• C) Store sensitive static data as secure strings in the AWS Systems Manager Parameter Store. Use dynamic references in the resources that need access to the data.
• D) Store sensitive static data in the AWS Systems Manager Parameter Store as strings. Reference the stored value using types of Systems Manager parameters.
• E) Use AWS KMS to encrypt the CloudFormation template.
• F) Use the CloudFormation NoEcho parameter property to mask the parameter value.

---

Definitions:

Effective

The degree to which something is successful in producing a desired result; efficiency.

Open System

A concept where an organization is viewed as an entity that interacts with its external environment, exchanging resources and information.

Resource Inputs

The resources (such as labor, capital, and materials) that are required for the production process or to perform services.

Product Outputs

Product outputs refer to the goods or services produced as a result of a company's manufacturing or service processes.