AWS Certified SysOps Administrator – AssociateDeployment, Provisioning, and AutomationMedium
A company is deploying a new containerized application on Amazon ECS using AWS Fargate. They need to ensure that the application's environment variables, such as API keys and database connection strings, are securely injected into the containers at runtime without exposing them in the task definition or source code. The solution must be highly secure and support rotation of credentials. Which AWS service should be used to manage and inject these sensitive configuration values?
- AAmazon S3
- BAWS Systems Manager Parameter Store
- CAWS Secrets Manager
- DEC2 User Data
Show answer & explanationAnswer & explanation
Correct answer: C. AWS Secrets Manager
AWS Secrets Manager is specifically designed for securely storing and managing sensitive information like database credentials, API keys, and other secrets. It integrates with ECS/Fargate to allow secure injection of these secrets into containers at runtime and supports automatic rotation of credentials, which is critical for security.
Why the other options are wrong
- A. Amazon S3 is not designed for storing and injecting sensitive runtime configuration like API keys securely into applications.
- B. Parameter Store can store sensitive data, but Secrets Manager offers more advanced features like automatic rotation and direct integration for secure injection into ECS tasks.
- D. EC2 User Data is for initial instance configuration, not for securely injecting dynamic, sensitive environment variables into containers at runtime.
AWS Secrets Manager
A service that helps you protect access to your applications, services, and IT resources. It enables you to easily rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle.
- Securely stores and retrieves secrets.
- Supports automatic rotation of database credentials.
- Integrates with services like ECS for runtime injection.
Memory trick: Secrets Manager safeguards keys, rotating them with ease.