Summary

In this chapter, you examined how to use the native services of AWS Secrets Manager and Systems Manager Parameter Store to store secret material, such as passwords and API keys, securely. You gained insights into why centralized secrets management is a critical part of a strong security strategy, both from a risk perspective and from the ability to audit the use of the secrets.

You learned how to store the secrets using different native AWS services, including AWS Secrets Manager and Systems Manager Parameter Store, and how to retrieve those secrets once they had been stored in the respective service(s).

This chapter marks the end of this comprehensive guide on the AWS Certified Security Specialty exam. This book covered all six domains of the exam, starting with the fundamentals of the AWS Shared Responsibility Model. You learned about what you are responsible for securing and what AWS is responsible for securing. You also reviewed the fundamental services that AWS provides...