Secrets Manager for credentials in AWS - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is AWS Secrets Manager used for?

AWS Secrets Manager securely stores and manages sensitive information like passwords, API keys, and database credentials, helping applications access them safely without hardcoding.

beginner

How does Secrets Manager help improve security compared to hardcoding credentials?

It keeps secrets encrypted and allows controlled access with permissions, reducing risk of exposure and enabling automatic rotation without changing application code.

intermediate

What is secret rotation in AWS Secrets Manager?

Secret rotation automatically updates stored credentials on a schedule, so applications always use fresh secrets without manual intervention.

beginner

Name one way applications can retrieve secrets from AWS Secrets Manager.

Applications can use AWS SDKs or CLI commands to call Secrets Manager APIs and securely fetch secrets at runtime.

intermediate

Why is it important to use IAM policies with Secrets Manager?

IAM policies control who or what can access secrets, ensuring only authorized users or services can retrieve sensitive information.

What does AWS Secrets Manager primarily store?

A Virtual machines

B Large files and backups

C Network configurations

D Sensitive information like passwords and API keys

AWS Secrets Manager is designed to store sensitive data such as passwords and API keys securely.

How does Secrets Manager protect stored secrets?

A Encrypts secrets at rest and in transit

B Stores secrets in plain text

C Sends secrets via email

D Requires manual password entry every time

Secrets Manager encrypts secrets both when stored and when transmitted to ensure security.

What feature allows Secrets Manager to update credentials automatically?

A Backup scheduling

B Manual update

C Secret rotation

D Access logging

Secret rotation automatically updates credentials on a schedule without manual effort.

Which AWS service controls access to secrets in Secrets Manager?

A EC2

B IAM (Identity and Access Management)

C S3

D CloudWatch

IAM policies define who can access secrets stored in Secrets Manager.

What is a best practice when using Secrets Manager in applications?

A Retrieve secrets at runtime using AWS SDK

B Hardcode secrets in application code

C Email secrets to developers

D Store secrets in public repositories

Fetching secrets at runtime via AWS SDK avoids hardcoding and improves security.

Explain how AWS Secrets Manager helps keep application credentials secure and easy to manage.

Think about how secrets are stored, accessed, and updated without exposing them.

Describe the process and benefits of secret rotation in AWS Secrets Manager.

Consider why changing passwords regularly without manual work is helpful.