Topic: AWS Certified Cloud Practitioner CLF-C02 topic 1 question 120

A company wants to design a centralized storage system to manage the configuration data and passwords for its critical business applications.
Which AWS service or capability will meet these requirements MOST cost-effectively?

A.
AWS Systems Manager Parameter Store
B.
AWS Secrets Manager
C.
AWS Config
D.
Amazon S3

Re: AWS Certified Cloud Practitioner CLF-C02 topic 1 question 120

both are correct but the question here is the MOST cost effective and that is Parameter Store that is free while Secret Manager is $1 per secret

Re: AWS Certified Cloud Practitioner CLF-C02 topic 1 question 120

both are correct but the question here is the MOST cost effective and that is Parameter Store that is free while Secret Manager is $1 per secret

Re: AWS Certified Cloud Practitioner CLF-C02 topic 1 question 120

A. AWS Systems Manager Parameter Store

AWS Systems Manager Parameter Store is a fully managed service that provides secure, hierarchical storage for configuration data management and secrets management. It allows you to store sensitive information such as passwords, database connection strings, and API keys in a centralized location. Additionally, it offers integration with AWS Identity and Access Management (IAM) for fine-grained access control. Since it is primarily designed for storing configuration data and also offers a free tier, it would likely be the most cost-effective solution for the given requirements.

Re: AWS Certified Cloud Practitioner CLF-C02 topic 1 question 120

It clearly asks for "Configuration data" thus only Parameter Store can accomplish this.

Re: AWS Certified Cloud Practitioner CLF-C02 topic 1 question 120

AWS Secrets Manager is specifically designed to store, manage, and rotate secrets such as database credentials, API keys, and other sensitive information securely. It provides a centralized and scalable solution for managing secrets, with built-in features for automatic rotation, auditing, and fine-grained access control.

Re: AWS Certified Cloud Practitioner CLF-C02 topic 1 question 120

According to ChatGPT: AWS Systems Manager Parameter Store provides a secure, hierarchical storage for configuration data management, including plaintext data such as passwords, as well as other sensitive information. It integrates well with other AWS services and allows you to easily reference parameters in your applications.

Re: AWS Certified Cloud Practitioner CLF-C02 topic 1 question 120

AWS Secrets Manager is specifically designed for managing sensitive information such as passwords, database credentials, and API keys securely. It provides centralized control and management of secrets, including automatic rotation and integration with AWS services. With Secrets Manager, you can store and access secrets programmatically through APIs or use them with other AWS services. Additionally, Secrets Manager offers a pay-as-you-go pricing model, making it cost-effective for managing sensitive data securely.

Re: AWS Certified Cloud Practitioner CLF-C02 topic 1 question 120

A = CORRECT

Re: AWS Certified Cloud Practitioner CLF-C02 topic 1 question 120

Answer is A. Parameter store is a centralized tore to manage configuration data and secret.

Re: AWS Certified Cloud Practitioner CLF-C02 topic 1 question 120

My answer is B(AWS Secrets Manager):
The parameter store is used for secure management of configuration data and settings information, but is primarily suitable for data in text format. However, for sensitive information such as passwords, AWS Secrets Manager is more suitable.

Re: AWS Certified Cloud Practitioner CLF-C02 topic 1 question 120

Parameter Store is the most cost effective

Re: AWS Certified Cloud Practitioner CLF-C02 topic 1 question 120

While both can store secrets, Secrets Manager is recommended for secrets due to additional capabilities like automatic rotation, access control, auditing and integration with services. Parameter Store is still useful for securely storing non-secret configuration values and referencing secrets stored in Secrets Manager.

Re: AWS Certified Cloud Practitioner CLF-C02 topic 1 question 120

Security Manager Parameter Store more cost-effective for simpler use cases

Re: AWS Certified Cloud Practitioner CLF-C02 topic 1 question 120

Answer is A:

while both services are used for managing and securing sensitive data, Parameter Store is more focused on configuration data and secure strings, while Secrets Manager is more focused on managing secrets with advanced requirements.

Re: AWS Certified Cloud Practitioner CLF-C02 topic 1 question 120

https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-parameter-store.html

Re: AWS Certified Cloud Practitioner CLF-C02 topic 1 question 120

AWS SSPS is cost effective.
https://dev.to/aws-builders/aws-secrets-manager-vs-systems-manager-parameter-store-choosing-the-right-solution-for-your-needs-42ed

Re: AWS Certified Cloud Practitioner CLF-C02 topic 1 question 120

Secret Manager is a secure and convenient storage system for API keys, passwords, certificates, and other sensitive data. Secret Manager provides a central place and single source of truth to manage, access, and audit secrets across Google Cloud.
It is a cost-effective and secure cloud-based solution that helps you store, manage, and protect your secrets.