Home › AWS Solutions Architect Professional › cloudcomputing › sapnewsolutions › Which AWS service centrally manages and rotates …
Which AWS service centrally manages and rotates application secrets (DB passwords, API keys, OAuth tokens) with fine-grained IAM access and audit?
AAmazon S3 with public read
BHardcoded env vars in container images
CAWS Snowball
DAWS Secrets Manager
Answer & Solution
Correct answer: D. AWS Secrets Manager
Secrets Manager is AWS's canonical secret store with rotation. The other options leak secrets or are unrelated.
Related questions
Which AWS service uses anycast routing on the AWS global edge network to provide static IPAn architect designs a global single-table NoSQL store with single-digit-ms latency and acWhich AWS storage tier is BEST for unstructured data accessed monthly with milliseconds-toWhich AWS service continuously monitors AWS accounts for malicious activity (cryptomining Which AWS service provides edge-DDoS protection plus rate-based rules and managed rule groAn architect must orchestrate a multi-step workflow with error handling, retries, parallelWhich AWS service provides a managed durable queue with at-least-once delivery, visibilityAn architect needs to decouple a producer service from many independent consumers, each pr