AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 202

Question

An Amazon API Gateway API invokes an AWS Lambda function that needs to interact with a software-as-a-service (SaaS) platform. A unique client token is generated in the SaaS platform to grant access to the Lambda function. A security engineer needs to design a solution to encrypt the access token at rest and pass the token to the Lambda function at runtime. Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Store the client token as a SecureString parameter in AWS Systems Manager Parameter Store. Use the AWS SDK to retrieve the value of the SecureString parameter in the Lambda function. AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Systems Manager Parameter Store securely stores configuration data and secrets. AWS Systems Manager operates and automates management of fleets of resources. This option delivers the requirement at the lowest cost.

AWS Certified Security - Specialty SCS-C02 — Question 202