Exam AWS Certified Developer Associate topic 1 question 277 discussion

Exam question from Amazon's AWS Certified Developer Associate

Question #: 277
Topic #: 1

[All AWS Certified Developer Associate Questions]

An open-source map application gathers data from several geolocation APIs. The application's source code repository is public and can be used by anyone, but the geolocation APIs must not be directly accessible.

A developer must implement a solution to prevent the credentials that are used to access the APIs from becoming public. The solution also must ensure that the application still functions properly.

Which solution will meet these requirements MOST cost-effectively?

A. Store the credentials in AWS Secrets Manager. Retrieve the credentials by using the GetSecretValue API operation.
B. Store the credentials in AWS Key Management Service (AWS KMS). Retrieve the credentials by using the GetPublicKey API operation.
C. Store the credentials in AWS Security Token Service (AWS STS). Retrieve the credentials by using the GetCallerldentity API operation.
D. Store the credentials in AWS Systems Manager Parameter Store. Retrieve the credentials by using the GetParameter API operation.

Show Suggested Answer

Suggested Answer: D 🗳️

by lrom at Nov. 28, 2022, 11:10 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Oleg_gol

Highly Voted 2 years, 7 months ago

Selected Answer: D

MOST cost-effectively D Secrets Manager: It is paid. The storage cost is $0.40 per secret per month and API interactions cost is $0.05 per 10,000 API calls. Parameter Store: For Standard parameters, No additional charge for storage and standard throughput. For higher throughput, API interactions cost is $0.05 per 10,000 API calls. For Advanced parameters, storage cost is $0.05 per advanced parameter per month and API interactions cost is $0.05 per 10,000 API calls.

upvoted 10 times

tony554556

2 years, 5 months ago

Thanks, it makes sense

upvoted 1 times

...

OtavioC

2 years, 2 months ago

But parameter store is not recomended for secret value, even being the cost-effectively, it's a secret value anyway...

upvoted 1 times

...

kaes

Most Recent 1 year, 8 months ago

Selected Answer: D

D https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-parameter-store.html Paramter store has as well SecureString

upvoted 1 times

...

rcaliandro

2 years ago

Selected Answer: A

I will go with A. Store the secrets in AWS Secretes Manager

upvoted 1 times

...

pranay_2406

2 years, 1 month ago

Selected Answer: D

It's D AWS Systems Manager Parameter Store provides a secure and scalable solution for storing and retrieving sensitive information such as credentials. It allows you to store the credentials as parameters with secure access control. By storing the credentials in Parameter Store, you can ensure they are protected and not exposed publicly. To retrieve the credentials, you can use the GetParameter API operation, which allows you to fetch the parameter value securely. The credentials can be retrieved programmatically within your application code when needed, ensuring that the application can access the geolocation APIs without exposing the credentials. Option A (AWS Secrets Manager) is a viable solution as well, but it may incur additional costs compared to Parameter Store. Secrets Manager provides advanced features like automatic rotation of secrets, which may not be necessary in this scenario. Therefore, Parameter Store would be the more cost-effective choice.

upvoted 1 times

...

Ankit1010

2 years, 4 months ago

D The MOST cost-effective solution for this scenario would be option D: Store the credentials in AWS Systems Manager Parameter Store and retrieve them using the GetParameter API operation. AWS Systems Manager Parameter Store is a service that enables storage of key-value pairs and secrets as parameters. It provides secure, hierarchical storage for configuration data management and secrets management. In this case, the application's credentials for accessing the geolocation APIs can be stored securely in the Parameter Store, and the application can retrieve the credentials as needed by using the GetParameter API operation. This solution is cost-effective because AWS Systems Manager Parameter Store is a free service, with users only paying for the storage and API request charges. It is also easy to use and integrates well with other AWS services.

upvoted 2 times

...