AWS Certified Developer – Associate (DVA-C02)SecurityMedium
A developer is building a web application that needs to securely store configuration data, such as database connection strings and environment variables. This data must be encrypted at rest and easily retrievable by the application. The solution should also support versioning of the configuration data. Which AWS service is best suited for this purpose?
- AAWS Key Management Service (KMS)
- BAmazon S3
- CAWS Systems Manager Parameter Store
- DAWS Secrets Manager
Show answer & explanationAnswer & explanation
Correct answer: C. AWS Systems Manager Parameter Store
AWS Systems Manager Parameter Store is ideal for storing configuration data and secrets. It supports secure strings (encrypted at rest using KMS), provides versioning, and is easily retrievable by applications, making it a perfect fit for persistent configuration management.
Why the other options are wrong
- A. KMS is for managing encryption keys, not for storing the configuration data itself.
- B. S3 is object storage; while it can store files, it's not optimized for structured configuration parameters with built-in versioning and secure string types.
- D. Secrets Manager is primarily for secrets that require automatic rotation, which is not specified for general configuration data.
AWS Systems Manager Parameter Store
A capability of AWS Systems Manager that provides secure, hierarchical storage for configuration data management and secrets. It allows you to store data such as passwords, database strings, and license codes as parameter values.
- Secure storage for configuration and secrets
- Supports encryption with KMS
- Provides versioning and hierarchical organization
Memory trick: Parameter Store keeps config secure and versioned.