Applications need configuration values (feature settings, endpoint URLs, table names) and secrets (database passwords, API keys). Both should live outside the code, in a service that controls access with IAM and records use in CloudTrail. AWS offers two main options, and the exam typically asks you to pick between them.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 4 more sections, 5 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.