AWS Certified Developer Associate DVA-C02 Practice Question
An engineer needs to securely manage the storage and retrieval of database login information for an application hosted on cloud-based virtual servers. These credentials are required by the application's code to establish database connections during run time. What method should the engineer employ to ensure that the login information is handled safely?
Apply an access policy granting the virtual server the necessary permissions to interact with the database without explicit credentials.
Leverage a secret management service for the secure handling of database authentication information, allowing the application to access these details at runtime as required.
Configure server environmental variables to hold the login details, reading them directly within the application whenever database connections are needed.
Embed the database credentials directly in the source code of the application, encrypting the information using a basic encryption algorithm.
The correct method for handling sensitive login information is to utilize a dedicated secret management service. This type of service provides a centralized repository to securely store, manage, and retrieve credentials, and offers features such as automatic rotation of secrets. Storing sensitive information in plaintext within application code or in environmental variables on the server can lead to potential security vulnerabilities such as inadvertent exposure in logs, version control, or to anyone with access to the server environment or codebase. While an identity and access management service can enforce policies for secure access, it does not provide a mechanism to store application secrets like database credentials.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a secret management service and how does it work?
Open an interactive chat with Bash
What are the risks of embedding database credentials in source code?
Open an interactive chat with Bash
How does automatic rotation of secrets improve security?
Open an interactive chat with Bash
AWS Certified Developer Associate DVA-C02
Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Information Technology Package Join Premium for Full Access