AWS Certified Developer Associate DVA-C02 Practice Question

The correct service for securely managing and injecting credentials at runtime is a dedicated secrets management service. It allows for the encryption, storage, and on-demand retrieval of sensitive configuration details such as database credentials. Specifically, a secrets management service provided by a major cloud provider would enable these credentials to be fetched dynamically by the application without being stored insecurely in the environment or within the application’s source code. Services intended for key management or permissions management are not suited for the dynamic provision of secret material to applications.