AWS Certified Developer - Associate DVA-C02 — Topic 1 Question 196

Question

A company built a new application in the AWS Cloud. The company automated the bootstrapping of new resources with an Auto Scaling group by using AWS CloudFormation templates. The bootstrap scripts contain sensitive data. The company needs a solution that is integrated with CloudFormation to manage the sensitive data in the bootstrap scripts. Which solution will meet these requirements in the MOST secure way?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Put the sensitive data into AWS Systems Manager Parameter Store as a secure string parameter. Update the CloudFormation templates to use dynamic references to specify template values. Systems Manager Parameter Store securely stores configuration data and secrets. AWS Systems Manager operates and automates management of fleets of resources. AWS CloudFormation provisions infrastructure as code repeatably.

AWS Certified Developer - Associate DVA-C02 — Question 196