AWS Certified Developer - Associate
Get started today
Ultimate access to all questions.
How can a company ensure secure, single encrypted database connection strings for multiple AWS Lambda functions accessing an Amazon Aurora DB instance, in compliance with an information security policy?
How can a company ensure secure, single encrypted database connection strings for multiple AWS Lambda functions accessing an Amazon Aurora DB instance, in compliance with an information security policy?
Explanation:
The best approach for this scenario is to use AWS Systems Manager Parameter Store to store the credentials as a secure string parameter. This service provides a centralized way to manage encrypted secrets across multiple services, making it more secure and manageable compared to environment variables, which would need to be updated individually. Parameter Store also integrates well with AWS Key Management Service (AWS KMS) for encryption. Although IAM database authentication (Option A) enhances security, it doesn't specifically address the storage of the connection string. Therefore, Option C is the most appropriate choice.