A modern enterprise is deploying a web application on AWS. The application runs on Amazon EC2 instances behind

Question

A modern enterprise is deploying a web application on AWS. The application runs on Amazon EC2 instances behind an Application Load Balancer. These instances run in an Auto Scaling group spanning multiple Availability Zones. The application stores data in an Amazon RDS for Oracle database instance and Amazon DynamoDB. Separate environments exist for development, testing, and production.
What is the most secure and scalable method to retrieve credentials during deployment?

Accepted Answer

B. Launch EC2 instances with an EC2 IAM role to access AWS services. Retrieve database credentials from AWS Secrets Manager.

Answer

A. Retrieve access keys from AWS Systems Manager SecureString parameters to access AWS services. Retrieve database credentials from Systems Manager SecureString parameters.

Answer

C. Retrieve access keys from AWS Systems Manager plaintext parameters to access AWS services. Retrieve database credentials from Systems Manager SecureString parameters.

Answer

D. Launch EC2 instances with an EC2 IAM role to access AWS services. Store database passwords alongside application artifacts in an encrypted configuration file.

Q50 — AWS DOP-C02 Ch.3

Correct Answer: B. Launch EC2 instances with an EC2 IAM role to access AWS services. Retrieve database credentials from AWS Secrets Manager.

Explanation