Questions: The development team has reached out to you for an AWS solution, wherein they can get rid of using hard-coded secrets in applications hosted in AWS Cloud. What will be your recommendation? AWS Secrets Manager Amazon Inspector AWS WatchGuard AWS Trusted Advisor

The answer is the first one: AWS Secrets Manager.

Explanation for each option:

1. AWS Secrets Manager: This is the correct choice. AWS Secrets Manager is a service that helps you protect access to your applications, services, and IT resources without the upfront investment and on-going maintenance costs of operating your own infrastructure. It allows you to easily rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle. This eliminates the need to hard-code sensitive information in your applications.

2. Amazon Inspector: This is incorrect. Amazon Inspector is a security assessment service that helps improve the security and compliance of applications deployed on AWS. It automatically assesses applications for vulnerabilities or deviations from best practices. It does not manage secrets.

3. AWS WatchGuard: This is incorrect. AWS WatchGuard is not a service offered by AWS. It might be confused with WatchGuard, a separate company that provides network security solutions, but it is not related to managing secrets in AWS.

4. AWS Trusted Advisor: This is incorrect. AWS Trusted Advisor is a tool that provides real-time guidance to help you provision your resources following AWS best practices. It offers insights into cost optimization, performance, security, and fault tolerance, but it does not manage secrets.

In summary, AWS Secrets Manager is the appropriate solution for managing secrets and eliminating hard-coded secrets in applications hosted in AWS Cloud.