Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 549 discussion

Exam question from Amazon's AWS Certified Developer - Associate DVA-C02

Question #: 549
Topic #: 1

[All AWS Certified Developer - Associate DVA-C02 Questions]

A developer is building an application that consists of many AWS Lambda functions. The Lambda functions connect to a single Amazon RDS database.

The developer needs to implement a solution to store the database credentials securely. When the credentials are updated, the Lambda functions must be able to use the new credentials without requiring a code update or a configuration update.

Which solution will meet these requirements?

A. Store the credentials as a secret in AWS Secrets Manager. Access the secret at runtime from within the Lambda functions.
B. Store the credentials as a secret in AWS Secrets Manager. Access the credentials in environment variables by using the containerDefinitions and valueFrom elements in reference to the secret value.
C. Store the credentials as a SecureString parameter in AWS Systems Manager Parameter Store. Add a trigger to pass the credentials to the Lambda functions when the Lambda functions run.
D. Store the credentials as a SecureString parameter in AWS Systems Manager Parameter Store. Add a reference to the parameter in an environment variable in the Lambda functions.

Show Suggested Answer

Suggested Answer: A 🗳️

by Dadasar at March 4, 2025, 2:27 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

thalasi

1 month ago

Selected Answer: A

Using Parameter Store with Environment variables do not auto-refresh, requiring redeployment or reloading functions for updated credentials. Secrets Manager is explicitly designed for credential management, while Parameter Store is more general-purpose

upvoted 1 times

...

0bdf3af

3 months, 2 weeks ago

Selected Answer: D

D We can store the credentials in SSM Parameter Store with encryption. Then we can add a environment variable "db_password" in lambda with proper credential name from SSM Parameter Store In the code in Lambda we can import ssm and call ssm.get_parameters(os.environ("db_password"))

upvoted 1 times

...

Dadasar

3 months, 2 weeks ago

Selected Answer: A

Secret manager é para essa finalidade

upvoted 1 times

...