Q68 — AWS SAA-C03 Ch.10

Question 68 of 100 | ← Chapter 10

Q668. A company is building an application on AWS that connects to an Amazon RDS database.The company wants to manage the application configuration and to securely store and retrieve credentials for the database and other services.Which solution will meet these requirements with the LEAST administrative overhead?

Correct Answer: A. Use AWS AppConfig to store and manage the application configuration. Use AWS Secrets Manager to store and retrieve the credentials

Explanation

To meet the requirements of managing application configuration, securely storing and retrieving credentials for an Amazon RDS database, and minimize administrative overhead, the solution that will be the least administrative overhead is:A. Use AWS AppConfig to store and manage the application configuration. Use AWS Secrets Manager to store and retrieve the credentials.Here's the rationale behind this solution:Option A: Use AWS AppConfig to store and manage the application configuration. Use AWS Secrets Manager to store and retrieve the credentials.AWS AppConfig is a service that enables you to manage application configurations across different environments. It allows you to store and manage configuration values and deploy changes to applications without the need for redeployment. This reduces administrative overhead as it provides a centralized and scalable way to manage application configurations.AWS Secrets Manager is a service specifically designed to securely store and retrieve secrets such as database credentials, API keys, and other sensitive information. It provides integration with other AWS services and allows you to securely access and manage credentials in your applications. By using AWS Secrets Manager, you can ensure that credentials are securely stored and retrieved without the need for manual management.Option B: Use AWS Lambda to store and manage the application configuration. Use AWS Systems Manager Parameter Store to store and retrieve the credentials. While AWS Lambda can be used to store and manage the application configuration, it may introduce additional complexity and administrative overhead compared to using AWS AppConfig, which is purpose- built for configuration management. AWS Systems Manager Parameter Store can be used to securely store and retrieve credentials, but it may require more manual management compared to AWS Secrets Manager.Option C: Use an encrypted application configuration file. Store the file in Amazon S3 for the application configuration. Create another S3 file to store and retrieve the credentials. Storing the application configuration and credentials in encrypted files in Amazon S3 can be an option, but it may require more manual management and may not provide the same level of scalability, security, and integration as the native AWS services designed for configuration management and secrets storage.Option D: Use AWS AppConfig to store and manage the application configuration. Use Amazon RDS to store and retrieve the credentials.While you can use AWS AppConfig to manage the application configuration, using Amazon RDS to store and retrieve credentials may not provide the same level of security and features as AWS Secrets Manager. AWS Secrets Manager is specifically designed for securely storing and managing credentials and provides additional features like rotation, fine-grained access control, and integration with other AWS services.Therefore, the solution that will meet the requirements with the least administrative overhead is to use AWS AppConfig to store and manage the application configuration and use AWS Secrets Manager to securely store and retrieve the credentials (Option A). This approach leverages purpose-built services for configuration management and secrets storage, reducing administrative overhead and providing enhanced security and integration capabilities.