A large enterprise is deploying a web application on AWS. The application runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Auto Scaling group across multiple Availability Zones. The application stores data in an Amazon RDS for Oracle DB instance and Amazon DynamoDB. There are separate environments for development, testing, and production. What is the MOST secure and flexible way to obtain password credentials during deployment?
Select one answer.
Marked answer: B
Community Discussion
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Chose C1
The question is about: secure and flexible way to obtain password credentials, is it not about how to run the deployment.
Chose B2
Keywords: MOST secure
Chose B2
This step is important for applications running on EC2 instances to retrieve passwords from AWS Secrets Manager. Create an IAM role with the necessary permissions to access AWS Secrets Manager. Attach this IAM role to your EC2 instance.
