Question

A development team stores a static third-party API key that never needs to be rotated, along with a set of application feature flags. They also store database credentials that must be automatically rotated every 30 days. The team wants to minimize cost while meeting all requirements. Which approach best satisfies these needs?

Accepted Answer

Store the API key and feature flags in Systems Manager Parameter Store, and store the database credentials in AWS Secrets Manager with automatic rotation enabled.

Answer

Store all three items in AWS Secrets Manager and enable automatic rotation for each secret.

Answer

Store all three items in Systems Manager Parameter Store as SecureString parameters and configure a scheduled rotation on each.

Answer

Store the API key and feature flags in Secrets Manager, and store the database credentials in Parameter Store as SecureString parameters.