AWS Certified Data Engineer - Associate DEA-C01 — Topic 1 Question 71

Question

During a security review, a company identified a vulnerability in an AWS Glue job. The company discovered that credentials to access an Amazon Redshift cluster were hard coded in the job script. A data engineer must remediate the security vulnerability in the AWS Glue job. The solution must securely store the credentials. Which combination of steps should the data engineer take to meet these requirements? (Choose two.)

Accepted Answer

Correct answer: D, E. The correct answer is D, E. Option D: Store the credentials in AWS Secrets Manager. Option E: Grant the AWS Glue job IAM role access to the stored credentials. AWS Glue is a serverless ETL and data-catalog service that prepares and integrates data. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

AWS Certified Data Engineer - Associate DEA-C01 — Question 71