Exam AWS Certified Developer - Associate DVA-C02 All Questions

View all questions & answers for the AWS Certified Developer - Associate DVA-C02 exam

Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 39 discussion

Exam question from Amazon's AWS Certified Developer - Associate DVA-C02

Question #: 39
Topic #: 1

[All AWS Certified Developer - Associate DVA-C02 Questions]

A company is planning to securely manage one-time fixed license keys in AWS. The company's development team needs to access the license keys in automaton scripts that run in Amazon EC2 instances and in AWS CloudFormation stacks.
Which solution will meet these requirements MOST cost-effectively?

A. Amazon S3 with encrypted files prefixed with “config”
B. AWS Secrets Manager secrets with a tag that is named SecretString
C. AWS Systems Manager Parameter Store SecureString parameters
D. CloudFormation NoEcho parameters

Show Suggested Answer

Suggested Answer: C 🗳️

by Untamables at March 26, 2023, 1:53 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

alohayo

Highly Voted 1 year, 5 months ago

Both B and C are feasible solutions. Just consider the "MOST cost effectively" here. AWS Systems Manager Parameter Store comes with no additional cost (Standard type). However, AWS Secrets Manager costs $0.40 per secret per month, and data retrieval costs $0.05 per 10,000 API calls. C is much cheaper, guy.

upvoted 27 times

...

hanJR

Highly Voted 1 year, 9 months ago

I chose C because AWS Secrets Manager does auto key rotation(The question says that the key is one-time fixed).

upvoted 19 times

...

sumanshu

Most Recent 7 months, 4 weeks ago

Selected Answer: C

A) Eliminated - this solution involves additional complexity B) Eliminated - Secrets Manager charges a fee for secret storage and API calls. For one-time fixed license keys, this might be unnecessary overhead. Secrets Manager is more suited for dynamically rotated secrets (e.g., database credentials), not fixed keys. C) Correct: SecureString parameters are free to store unless using advanced features, making it highly cost-efficient. D) Eliminated - Parameters marked with NoEcho are limited to the stack and cannot be accessed programmatically by EC2 instances

upvoted 3 times

...

Freddie26

7 months, 4 weeks ago

Selected Answer: C

"One-time fixed license keys" are unique codes provided when purchasing a software license. It's more cost effective to provide this via AWS Systems Manager with secure parameters.

upvoted 1 times

...

65703c1

8 months, 4 weeks ago

Selected Answer: C

C is the correct answer.

upvoted 1 times

...

william_cit

10 months, 3 weeks ago

It said 'one-time fixed license keys' and 'MOST cost-effectively', so C is better

upvoted 2 times

...

ibratoev

10 months, 3 weeks ago

C seems the best fit.

upvoted 2 times

...

s50600822

1 year, 8 months ago

PS prob is free for this use case https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-advanced-parameters.html, even though SM cost may also count to nothing(due to the scale of the use case and caching client). Again the only notable difference is the aforementioned irrelevant tag.

upvoted 3 times

...

Untamables

1 year, 10 months ago

Selected Answer: C

C 'https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-parameter-store.html

upvoted 9 times

...