Which solution will meet these requirements MOST cost-effectively?

A company is planning to securely manage one-time fixed license keys in AWS. The company’s development team needs to access the license keys in automaton scripts that run in Amazon EC2 instances and in AWS CloudFormation stacks.

Which solution will meet these requirements MOST cost-effectively?
A . Amazon S3 with encrypted files prefixed with “config”
B . AWS Secrets Manager secrets with a tag that is named SecretString
C . AWS Systems Manager Parameter Store SecureString parameters
D . CloudFormation NoEcho parameters

View Answer

Answer: C

Explanation:

AWS Systems Manager Parameter Store is a service that provides secure, hierarchical storage for configuration data and secrets. Parameter Store supports SecureString parameters, which are encrypted using AWS Key Management Service (AWS KMS) keys. SecureString parameters can be used to store license keys in AWS and retrieve them securely from automation scripts that run in EC2 instances or CloudFormation stacks. Parameter Store is a cost-effective solution because it does not charge for storing parameters or API calls.

Reference: Working with Systems Manager parameters