AWS Certified Developer Associate DVA-C02 Practice Question
A developer must supply credentials for an external SaaS API to an application that runs on an Amazon EC2 instance. The credentials must not be hard-coded in the source code or stored in plaintext configuration files. Which AWS service should the developer use to store the credentials and allow the application to retrieve them securely at runtime?
Store the credentials as plaintext environment variables in the EC2 instance
AWS Secrets Manager
Store the credentials in an encrypted Amazon S3 object
AWS Systems Manager Parameter Store (String type) without encryption
AWS Secrets Manager is specifically designed to store, encrypt, and rotate sensitive data such as API keys and database passwords. Applications can call the service at runtime to fetch the secret over TLS, and IAM policies control access. Plaintext environment variables, unencrypted AWS Systems Manager Parameter Store strings, or even encrypted objects in Amazon S3 still leave room for accidental exposure because they lack built-in secret rotation, fine-grained auditing, and enforced encryption of the secret itself.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
How does AWS Secrets Manager ensure secure storage and retrieval of credentials?
Open an interactive chat with Bash
What is the benefit of using AWS Secrets Manager over plaintext environment variables?
Open an interactive chat with Bash
How does automatic secret rotation work in AWS Secrets Manager?
Open an interactive chat with Bash
AWS Certified Developer Associate DVA-C02
Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .