SAA-C03 - Design Secure Architectures - Section 1.5
Manage application secrets and credentials securely using AWS Secrets Manager, Systems Manager Parameter Store and Amazon Cognito.
Describe how AWS Secrets Manager stores and automatically rotates credentials such as database passwords, and contrast it with Systems Manager Parameter Store for storing configuration values. Recognise when Amazon Cognito is the appropriate service for managing application user identities and issuing tokens rather than using IAM credentials directly.
AWS Secrets ManagerParameter StoreSecret rotationAmazon Cognito
More in this domain
Back to all Design Secure Architectures objectives, or the SAA-C03 cert hub.
Examworthy is not affiliated with or endorsed by Amazon Web Services. Original, blueprint-aligned practice material only.