AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 140

Question

A company uses user data scripts that contain sensitive information to bootstrap Amazon EC2 instances. A security engineer discovers that this sensitive information is viewable by people who should not have access to it. What is the MOST secure way to protect the sensitive information used to bootstrap the instances?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Store the sensitive data in AWS Systems Manager Parameter Store using the encrypted string parameter and assign the GetParameters permission to the EC2 instance role. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Systems Manager Parameter Store securely stores configuration data and secrets. AWS Systems Manager operates and automates management of fleets of resources.

AWS Certified Security - Specialty SCS-C02 — Question 140