CLF-C02 Question 158

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  A. AWS CloudHSM: AWS CloudHSM (Hardware Security Module) is a service that provides hardware-based key storage for sensitive data and cryptographic operations. B. AWS Key Management Service (AWS KMS) is used for creating and controlling encryption keys used to encrypt your data C. AWS Secrets Manager is designed specifically for storing, managing, and rotating credentials securely and automatically D. Server-side encryption process where data is encrypted at the server level before it is stored, which is primarily used to protect data at rest

• Chose C1

  C. AWS Secrets Manager

• 7

  AWS Secrets Manager helps in the secure storage, rotation, and retrieval of sensitive credentials such as API keys, database passwords, and other secrets used by applications. AWS CloudHSM provides hardware-based key storage for cryptographic keys and is more focused on custom key storage and compliance needs, which might be an overkill for just credential management and rotation. AWS Key Management Service (AWS KMS) is used for creating and managing encryption keys. While it's crucial for encryption, it doesn’t directly handle the automated management and rotation of credentials shared between applications.