A recent security audit identified that a company's application team injects database credentials into the environment variables of an AWS Fargate task. The company's security policy mandates that all sensitive data be encrypted at rest and in transit.
When combination of actions should the security team take to make the application compliant within the security policy? (Select THREE)

Question

A recent security audit identified that a company's application team injects database credentials into the environment variables of an AWS Fargate task. The company's security policy mandates that all sensitive data be encrypted at rest and in transit.

When combination of actions should the security team take to make the application compliant within the security policy? (Select THREE)

Luke Smith · Accepted Answer

Create an AWS Secrets Manager secret and specify the key/value pairs to be stored in this secret

Luke Smith · Accepted Answer

Add the following statement to the execution role policy.

Luke Smith · Accepted Answer

Log in to the AWS Fargate instance, create a script to read the secret value from AWS Secret Manager, and inject the environment variables. Ask the application team to redeploy the application.

Luke Smith · Answer

Store the credentials securely in a file in an Amazon S3 bucket with restricted access to the application team IAM role Ask the application team to read the credentials from the S3 object instead

Luke Smith · Answer

Modify the application to pull credentials from the AWS Secrets Manager secret instead of the environment variables.

Luke Smith · Answer

Add the following statement to the container instance IAM role policy

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 113 - SCS-C01 discussion

Suggested answer: B, E, F

0 comments