Exam AWS-SysOps topic 1 question 742 discussion

Exam question from Amazon's AWS-SysOps

Question #: 742
Topic #: 1

A web application runs on Amazon EC2 instances and accesses external services. The external services require authentication credentials. The application is deployed using AWS CloudFormation to three separate environments: development, test, and production. Each environment requires unique credentials for external services.
What option securely provides the application with the needed credentials while requiring MINIMAL administrative overhead?

A. Pass the credentials for the target environment to the CloudFormation template as parameters. Use the user data script to insert the parameterized credentials into the EC2 instances.
B. Store the credentials as secure strings in AWS Systems Manager Parameter Store. Pass an environment tag as a parameter to the CloudFormation template. Use the user data script to insert the environment tag in the EC2 instances. Access the credentials from the application.
C. Create a separate CloudFormation template for each environment. In the Resources section, include a user data script for each EC2 instance. Use the user data script to insert the proper credentials for the environment into the EC2 instances.
D. Create separate Amazon Machine Images (AMIs) with the required credentials for each environment. Pass the environment tag as a parameter to the CloudFormation template. In the Mappings section of the CloudFormation template, map the environment tag to the proper AMI, then use that AMI when launching the EC2 instances.

Show Suggested Answer

Suggested Answer: A 🗳️

by RyanGhavidel at April 14, 2020, 10:23 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

albert_kuo

11 months, 2 weeks ago

Selected Answer: B

Storing the credentials as secure strings in AWS Systems Manager Parameter Store allows for secure storage and centralized management of sensitive information. This approach helps minimize administrative overhead while providing secure access to the credentials. By passing an environment tag as a parameter to the CloudFormation template, you can specify the target environment during deployment. The user data script can then retrieve the environment tag and insert it into the EC2 instances. The application can access the credentials from the Systems Manager Parameter Store using the appropriate API calls or SDKs provided by AWS. This allows the application to securely retrieve the necessary credentials at runtime.

upvoted 1 times

...

gulu73

1 year, 4 months ago

2 years, 9 months ago

B is correct

upvoted 4 times

Bad_Mat

2 years, 9 months ago

Any link? Why not A?

upvoted 1 times

...