AWS Certified Developer - Associate DVA-C02 — Topic 1 Question 219

Question

A company has an existing application that has hardcoded database credentials. A developer needs to modify the existing application. The application is deployed in two AWS Regions with an active-passive failover configuration to meet company’s disaster recovery strategy. The developer needs a solution to store the credentials outside the code. The solution must comply with the company’s disaster recovery strategy. Which solution will meet these requirements in the MOST secure way?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Store the credentials in AWS Secrets Manager in the primary Region. Enable secret replication to the secondary Region. Update the application to use the Amazon Resource Name (ARN) based on the Region. AWS Secrets Manager stores and automatically rotates secrets such as database credentials. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

AWS Certified Developer - Associate DVA-C02 — Question 219