Question 71
During a security review, a company identified a vulnerability in an AWS Glue job. The company discovered that credentials to access an Amazon Redshift cluster were hard coded in the job script. A data engineer must remediate the security vulnerability in the AWS Glue job. The solution must securely store the credentials. Which combination of steps should the data engineer take to meet these requirements? (Choose two.)
- Store the credentials in the AWS Glue job parameters.
- Store the credentials in a configuration file that is in an Amazon S3 bucket.
- Access the credentials from a configuration file that is in an Amazon S3 bucket by using the AWS Glue job.
- Store the credentials in AWS Secrets Manager.
- Grant the AWS Glue job IAM role access to the stored credentials.