AWS Certified DevOps Engineer - Professional DOP-C02 — Topic 1 Question 108

Question

A large enterprise is deploying a web application on AWS. The application runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Auto Scaling group across multiple Availability Zones. The application stores data in an Amazon RDS for Oracle DB instance and Amazon DynamoDB. There are separate environments for development, testing, and production. What is the MOST secure and flexible way to obtain password credentials during deployment?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Launch the EC2 instances with an EC2 IAM role to access AWS services. Retrieve the database credentials from AWS Secrets Manager. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

AWS Certified DevOps Engineer - Professional DOP-C02 — Question 108