Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 9 discussion

A company wants to share information with a third party. The third party has an HTTP API endpoint that the company can use to share the information. The company has the required API key to access the HTTP API.
The company needs a way to manage the API key by using code. The integration of the API key with the application code cannot affect application performance.
Which solution will meet these requirements MOST securely?

  • A. Store the API credentials in AWS Secrets Manager. Retrieve the API credentials at runtime by using the AWS SDK. Use the credentials to make the API call.
  • B. Store the API credentials in a local code variable. Push the code to a secure Git repository. Use the local code variable at runtime to make the API call.
  • C. Store the API credentials as an object in a private Amazon S3 bucket. Restrict access to the S3 object by using IAM policies. Retrieve the API credentials at runtime by using the AWS SDK. Use the credentials to make the API call.
  • D. Store the API credentials in an Amazon DynamoDB table. Restrict access to the table by using resource-based policies. Retrieve the API credentials at runtime by using the AWS SDK. Use the credentials to make the API call.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Kristijan92
Highly Voted 1 year, 5 months ago
Selected Answer: A
answer A
upvoted 13 times
...
elfinka9
Highly Voted 1 year, 1 month ago
Selected Answer: A
Why B is marked as correct ????
upvoted 9 times
ACurryDeveloper
1 month, 2 weeks ago
Why is developer being a benchod? A, b, c or d?
upvoted 1 times
...
...
ahadh7621
Most Recent 1 month, 3 weeks ago
Got this question was on my exam July 23rd, 2024.
upvoted 1 times
TheeLotus
3 weeks ago
what was the answer. B?
upvoted 1 times
...
...
nkroker
2 months, 2 weeks ago
B is certainly a wrong answer because if you read the application development with AWS case study and also the best practices then in it the AWS itself does not encourage the developer to store the sensitive API and license keys in code on the other hand it encourages to use the provided solutions like KMS, Secrets Manager and Parameter Store.
upvoted 1 times
...
297dfbb
3 months ago
Selected Answer: A
A is correct. B is wrong because you never store credentials in source control.
upvoted 1 times
...
c949c84
3 months ago
Selected Answer: A
Most secure
upvoted 2 times
...
65703c1
3 months, 4 weeks ago
Selected Answer: A
A is the correct answer.
upvoted 1 times
...
Prosen2522
4 months, 1 week ago
A is it
upvoted 1 times
...
badsati
5 months, 2 weeks ago
Straight A
upvoted 1 times
...
bednark
7 months, 4 weeks ago
Selected Answer: A
A is correct
upvoted 1 times
...
leonardoliveros
10 months ago
Selected Answer: A
B isn't secury A is the best option for this scenary
upvoted 2 times
...
gullyboy77
11 months, 2 weeks ago
Selected Answer: A
Secret Manager is the safest way to store secrets in AWS.
upvoted 2 times
...
chvtejaswi
1 year ago
Selected Answer: A
Answer A
upvoted 2 times
...
hmdev
1 year ago
Selected Answer: A
A seems to be the most secure and correct. Always use Secret Manger to store secrets, as the name implies.
upvoted 1 times
...
Yuxing_Li
1 year ago
Selected Answer: A
A is correct
upvoted 1 times
...
sivuca1
1 year ago
Selected Answer: A
The other options (B, C and D) are not as safe or manageable:
upvoted 1 times
...
sp323
1 year, 1 month ago
Selected Answer: A
parameter store is secure, so A
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...