SAP-C02 Question 208

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  I find this is a badly formatted question which doesn't have a good answer. A - Solution can't react to "upon request" event => wrong B - Storing keys in Parameter Store is not secure => wrong C - Solution can't rotate SSH keys => wrong D - Solution doesn't offer centrally managed key store => wrong

• Chose A1

  Secrets Manager gives encrypted storage + rotation hooks; Lambda generates per-instance keypairs and updates authorized_keys via SSM → <1 min downtime. B/C/D miss either secure storage, correct rotation capability, or use the wrong service for SSH key managemen

• Chose A1

  https://aws.amazon.com/cn/blogs/security/how-to-use-aws-secrets-manager-securely-store-rotate-ssh-key-pairs/