AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 42

Question

A company has thousands of AWS Lambda functions. While reviewing the Lambda functions, a security engineer discovers that sensitive information is being stored in environment variables and is viewable as plaintext in the Lambda console. The values of the sensitive information are only a few characters long. What is the MOST cost-effective way to address this security issue?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Store the environment variables in AWS Systems Manager Parameter Store as secure string parameters, and access them at runtime. Use IAM permissions to restrict access to the parameters to only the Lambda functions tha... AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. Systems Manager Parameter Store securely stores configuration data and secrets. This option delivers the requirement at the lowest cost.

AWS Certified Security - Specialty SCS-C02 — Question 42