Which solution will meet these requirements in the MOST operationally efficient way?

By:
In: DVA-C02
Tagged:
With: 2 Comments
A data visualization company wants to strengthen the security of its core applications.The applications are deployed on AWS across its development, staging, pre-production, and production environments.The company needs to encrypt all of its stored sensitive credentials.The sensitive credentials need to be automatically rotated.A version of the sensitive credentials need to be stored for each environment.

Which solution will meet these requirements in the MOST operationally efficient way?

Configure AWS Secrets Manager versions to store different copies of the same credentials across multiple environments.

Create a new parameter version in AWS Systems Manager Parameter Store for each environment. Store the environment-specific credentials in the parameter version.

Configure the environment variables in the application code. Use different names for each environment type.

Configure AWS Secrets Manager to create a new secret for each environment type. Store the environment-specific credentials in the secret.

Explanations:

AWS Secrets Manager allows versioning of secrets, but using different versions of the same secret across multiple environments is not optimal for separating environment-specific configurations. Managing separate secrets per environment ensures better clarity and control.

AWS Systems Manager Parameter Store is designed for storing parameters, but it does not offer the same level of automated secret rotation as AWS Secrets Manager. Additionally, managing parameter versions for multiple environments would not be as efficient as using a dedicated secret per environment.

Storing sensitive credentials in environment variables within application code is not secure or manageable for sensitive data like credentials. This method also lacks automated rotation and does not separate the credentials effectively across different environments.

Configuring AWS Secrets Manager to create separate secrets for each environment ensures secure, encrypted storage, with automated rotation, versioning, and environment-specific configurations. This solution meets the requirements for operational efficiency and security.

2026-03-30

2 Comments

  1. Carolyn
    Author

    I systematize that the answer is:
    Configure AWS Secrets Manager to create a new secret for each environment type. Store the environment-specific credentials in the secret.

  2. Lauren
    Author

    I assess that the answer is:
    Configure AWS Secrets Manager to create a new secret for each environment type. Store the environment-specific credentials in the secret.

Leave a Reply

Your email address will not be published. Required fields are marked *

four × 4 =