Home › AWS Security › cloudcomputing › scsdatagov › Which AWS service lightweight-stores parameters …
Which AWS service lightweight-stores parameters + SecureString secrets, integrated with KMS encryption — a cheaper alternative to Secrets Manager when rotation isn't required?
AAmazon EBS
BAWS Snowball
CAWS Systems Manager Parameter Store (SecureString type)
DAmazon Route 53
Answer & Solution
Correct answer: C. AWS Systems Manager Parameter Store (SecureString type)
SSM Parameter Store SecureString is the lower-cost no-rotation secret store (per SCS-C02 §5.4). The others aren't secret stores.
Related questions
Which AWS service helps a security engineer collect evidence for compliance audits — assesWhich AWS service provides a turnkey multi-account landing-zone with guardrails, account fWhich AWS Organization feature lets a security engineer enforce 'deny all use of root userWhich AWS service centrally manages multiple AWS accounts with consolidated billing, SCPs,Which AWS service automatically discovers and classifies sensitive data (PII, financial daWhich AWS feature lets a security engineer enforce 'no S3 bucket can be made public' acrosWhich Amazon S3 feature enforces WORM (write-once-read-many) data retention to protect logWhich AWS service centrally stores application secrets (DB passwords, API keys, OAuth toke