Topic 1 Question 549
A developer is building an application that consists of many AWS Lambda functions. The Lambda functions connect to a single Amazon RDS database.
The developer needs to implement a solution to store the database credentials securely. When the credentials are updated, the Lambda functions must be able to use the new credentials without requiring a code update or a configuration update.
Which solution will meet these requirements?
Store the credentials as a secret in AWS Secrets Manager. Access the secret at runtime from within the Lambda functions.
Store the credentials as a secret in AWS Secrets Manager. Access the credentials in environment variables by using the containerDefinitions and valueFrom elements in reference to the secret value.
Store the credentials as a SecureString parameter in AWS Systems Manager Parameter Store. Add a trigger to pass the credentials to the Lambda functions when the Lambda functions run.
Store the credentials as a SecureString parameter in AWS Systems Manager Parameter Store. Add a reference to the parameter in an environment variable in the Lambda functions.
ユーザの投票
コメント(2)
- 正解だと思う選択肢: A
Secret manager é para essa finalidade
👍 1Dadasar2025/03/03 - 正解だと思う選択肢: D
D We can store the credentials in SSM Parameter Store with encryption. Then we can add a environment variable "db_password" in lambda with proper credential name from SSM Parameter Store In the code in Lambda we can import ssm and call ssm.get_parameters(os.environ("db_password"))
👍 10bdf3af2025/03/04
シャッフルモード