CloudGuild · Blog · Cheat sheets · Lessons · Certifications
Exam Question Walkthrough: Managing Sensitive Information in AWS
Securely storing user credentials is critical. Let's analyze a question from the SAA-C03 exam to clarify the best service for this task.
When it comes to storing sensitive information, candidates often trip over which AWS service to choose. The options may seem similar at first glance, but the right choice is crucial for security.
The question
Your organization is planning to deploy a multi-tier application in AWS. The application needs to securely store user credentials and sensitive configuration data. Which service would provide the best solution for managing this sensitive information?
- A. AWS Systems Manager Parameter Store
- B. Amazon DynamoDB
- C. Amazon RDS
- D. AWS CloudFormation
Think before you scroll
Consider the nature of the data you need to store. The options include databases and infrastructure management tools. Only one option is designed specifically for securely managing sensitive information like credentials.
The answer
The correct option is A. AWS Systems Manager Parameter Store. This service is tailored for securely storing configuration data and secrets, offering built-in encryption features that meet the requirements for managing sensitive information.
Why the other options lose
- B. Amazon DynamoDB: While DynamoDB is a powerful NoSQL database, it is not designed specifically for managing sensitive information like credentials. It lacks the built-in encryption and secret management features of Parameter Store.
- C. Amazon RDS: Amazon RDS is a managed relational database service. It’s excellent for storing structured data but does not provide the specialized capabilities needed for securely storing sensitive configuration data and user credentials.
- D. AWS CloudFormation: This service is used for infrastructure as code, allowing you to define and provision AWS infrastructure. It does not offer any mechanisms for securely managing sensitive information.
The concept behind it
When managing sensitive information in AWS, focus on services specifically designed for security and secret management. AWS Systems Manager Parameter Store provides a secure method for storing parameters and secrets, making it the go-to option for this type of requirement.
Exam trap to remember
Remember the rule: Use Parameter Store for secure storage of sensitive information. It’s built for this purpose, unlike databases or infrastructure management tools.