A hotel booking application's backend has been built with micro-services using AWS Lambda. Many of these micro-services require access to a common database. The developers have asked you what is the best way to store the database connection string and username/password to allow each service to connect. The connection parameters will vary based on which environment (Dev/Test/Prod) that the micro-services are deployed. What is the best method to store the common configuration?What is the best method to store the common configuration?Application source codeAWS Lambda Environment VariablesAWS AppConfigAWS Systems Manager Parameter StoreAWS Config
Question
A hotel booking application's backend has been built with micro-services using AWS Lambda. Many of these micro-services require access to a common database. The developers have asked you what is the best way to store the database connection string and username/password to allow each service to connect. The connection parameters will vary based on which environment (Dev/Test/Prod) that the micro-services are deployed. What is the best method to store the common configuration?What is the best method to store the common configuration?Application source codeAWS Lambda Environment VariablesAWS AppConfigAWS Systems Manager Parameter StoreAWS Config
Solution
The best method to store the common configuration, such as database connection strings and credentials, especially when they vary based on the environment (Dev/Test/Prod), is by using AWS Systems Manager Parameter Store.
Here's why:
-
AWS Systems Manager Parameter Store provides secure, hierarchical storage for configuration data management and secrets management. You can store data such as passwords, database strings, and license codes as parameter values.
-
It's not advisable to store sensitive data in the application source code for security reasons.
-
AWS Lambda Environment Variables could be used, but they are less secure and less manageable for larger systems compared to AWS Systems Manager Parameter Store.
-
AWS AppConfig is more about application configuration deployment controls and not specifically for secrets management.
-
AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources, not for storing configuration data.
So, AWS Systems Manager Parameter Store is the best choice for this scenario.
Similar Questions
4.A company needs to securely store important credentials that an application uses to connect users to a database. Which AWS service can meet this requirement with the MINIMAL amount of operational overhead?AWS Key Management Service (AWS KMS)AWS ConfigAWS Secrets ManagerAmazon GuardDutyNEXT
What is the way to store local variables that can be accessed within the application?(1 Point)Using Config fileUsing app.storageUsing app.localsUsing database
What is the purpose of the config object?To store the server's portTo store the database URLTo store the API keyTo store all the configuration values
Which AWS services are managed database services? (Choose two.)
A multi-national company has its business-critical data stored on a fleet of Amazon Elastic Compute Cloud (Amazon EC2) instances, in various countries, configured in region-specific compliance rules. To demonstrate compliance, the company needs to submit historical configurations on a regular basis. Which AWS service is best suited for this requirement?Question 62Answera.Amazon GuardDutyb.AWS CloudTrailc.AWS Configd.Amazon Macie
Upgrade your grade with Knowee
Get personalized homework help. Review tough concepts in more detail, or go deeper into your topic by exploring other relevant questions.