Answer-first summary for fast verification
Answer: Use AWS Systems Manager Parameter Store with dynamic CloudFormation references.
The correct answer is C. AWS Systems Manager Parameter Store allows you to store sensitive data securely as secure string parameters, which are encrypted using an AWS KMS key. By using dynamic references in CloudFormation templates, you can securely retrieve these parameters during bootstrapping without exposing sensitive information in the templates themselves. This approach provides a secure and integrated solution for managing sensitive data in the AWS Cloud.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
In an AWS Cloud application using CloudFormation for Auto Scaling group bootstrapping, how should sensitive data in bootstrap scripts be managed securely?
A
Encrypt CloudFormation templates with AWS KMS.
B
Download sensitive data from an Amazon S3 bucket during bootstrap.
C
Use AWS Systems Manager Parameter Store with dynamic CloudFormation references.
D
Retrieve sensitive data from Amazon EFS with enforced encryption.
No comments yet.