AWS - Lambda
You want to securely store a database password in a Lambda environment variable but avoid exposing it in plain text. Which approach is best practice?
You want to securely store a database password in a Lambda environment variable but avoid exposing it in plain text. Which approach is best practice?
hard📝 Best Practice Q15 of 15
Step-by-Step Solution
Solution:
Step 1: Understand secure storage options
Lambda environment variables support encryption with AWS KMS and access control.Step 2: Evaluate other options
Hardcoding, public S3, or sending passwords in query parameters expose secrets and are insecure.Final Answer:
Use AWS Lambda environment variables with encryption enabled and grant decryption permissions -> Option AQuick Check:
Encrypted env vars + permissions = secure secret storage [OK]
Quick Trick: Encrypt env vars and control access for secrets [OK]
Common Mistakes:
- Hardcoding secrets in code
- Using public storage for passwords
- Exposing secrets in API requests
Master "Lambda" in AWS
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore AWS Quizzes