Which solution will meet these requirements MOST cost-effectively?

By:
In: DVA-C01
Tagged:
With: 2 Comments
An open-source map application gathers data from several geolocation APIs.The application’s source code repository is public and can be used by anyone, but the geolocation APIs must not be directly accessible.A developer must implement a solution to prevent the credentials that are used to access the APIs from becoming public.The solution also must ensure that the application still functions properly.

Which solution will meet these requirements MOST cost-effectively?

Store the credentials in AWS Secrets Manager. Retrieve the credentials by using the GetSecretValue API operation.

Store the credentials in AWS Key Management Service (AWS KMS). Retrieve the credentials by using the GetPublicKey API operation.

Store the credentials in AWS Security Token Service (AWS STS). Retrieve the credentials by using the GetCallerldentity API operation.

Store the credentials in AWS Systems Manager Parameter Store. Retrieve the credentials by using the GetParameter API operation.

Explanations:

AWS Secrets Manager is a good solution for managing secrets, but it may be more expensive than AWS Systems Manager Parameter Store, which is sufficient for this use case.

AWS Key Management Service (AWS KMS) is used for encryption key management, not for storing credentials. The GetPublicKey API is not designed for retrieving secrets.

AWS Security Token Service (AWS STS) is used for temporary credentials and identity management, not for storing long-term API credentials.

AWS Systems Manager Parameter Store is cost-effective for storing API credentials and allows retrieval through the GetParameter API operation, meeting the requirements.

2026-04-03

2 Comments

  1. Kevin
    Author

    I think the answer is:
    Store the credentials in AWS Systems Manager Parameter Store. Retrieve the credentials by using the GetParameter API operation.

  2. Nicholas
    Author

    In my experience, the answer is:
    Store the credentials in AWS Systems Manager Parameter Store. Retrieve the credentials by using the GetParameter API operation.

Leave a Reply

Your email address will not be published. Required fields are marked *

four × 4 =