CloudGuild · Blog · Cheat sheets · Lessons · Certifications
Secure Service Communication in AWS: An Exam Question Walkthrough
Learn how to approach a question on secure service communication in AWS for the Solutions Architect - Associate exam.
A common challenge in the AWS Certified Solutions Architect - Associate exam is understanding how various services interact to ensure secure communication. Questions about security, compliance, and service connectivity can trip up even well-prepared candidates.
The question
A financial institution needs to build a multi-service architecture that processes transactions securely. They want to ensure that all services can communicate securely while adhering to compliance requirements. Which AWS service should they implement to manage access between these services?
- A. AWS IAM for user permissions
- B. AWS Secrets Manager for storing API keys
- C. AWS PrivateLink for secure service communication
- D. AWS CloudTrail for logging access
Think before you scroll
Before selecting an answer, consider how each option addresses the need for secure communication between services. Focus on the specific security requirements mentioned in the question, especially the emphasis on adhering to compliance needs.
The answer
The correct option is C. AWS PrivateLink for secure service communication. This service offers private connectivity between VPCs and services, ensuring that data remains secure and is not exposed to the public internet. This aligns perfectly with the financial institution's need for secure service communication.
Why the other options lose
- A. AWS IAM for user permissions: While AWS IAM is essential for managing user permissions and access control, it does not provide the necessary infrastructure for secure service-to-service communication. IAM’s role is more about who can access what, rather than how services communicate securely.
- B. AWS Secrets Manager for storing API keys: AWS Secrets Manager is valuable for managing sensitive information like API keys and credentials. However, it does not facilitate the secure communication between services. It focuses on secure storage rather than the transport layer of service interactions.
- D. AWS CloudTrail for logging access: AWS CloudTrail is crucial for logging and monitoring API calls and user activity, which is important for compliance and auditing. However, it does not influence the security of communication between services. It records actions rather than securing them.
The concept behind it
The underlying principle here is the necessity for secure service communication in multi-service architectures. AWS PrivateLink creates private endpoints, which prevent data exposure to the public internet, thereby ensuring that services can communicate securely while meeting compliance needs. Understanding how AWS services interact to secure communication will help you tackle similar questions in the exam.
Exam trap to remember
Remember the focus on service-to-service communication. In scenarios requiring secure transactions and compliance, look for options that specifically address how services connect securely, like AWS PrivateLink.