Amazon
DBS-C01 · Question #106
A company is going through a security audit. The audit team has identified cleartext master user password in the AWS CloudFormation templates for Amazon RDS for MySQL DB instances. The audit team…
The correct answer is B. Use an AWS Secrets Manager resource to generate a random password and reference the. https://aws.amazon.com/blogs/infrastructure-and-automation/securing-passwords-in-aws-quick- starts-using-aws-secrets-manager/
Submitted by khalil_dz· Mar 6, 2026Database Security
Question
A company is going through a security audit. The audit team has identified cleartext master user password in the AWS CloudFormation templates for Amazon RDS for MySQL DB instances. The audit team has flagged this as a security risk to the database team. What should a database specialist do to mitigate this risk?
Options
- AChange all the databases to use AWS IAM for authentication and remove all the cleartext
- BUse an AWS Secrets Manager resource to generate a random password and reference the
- CRemove the passwords from the CloudFormation templates so Amazon RDS prompts for the
- DRemove the passwords from the CloudFormation template and store them in a separate file.
How the community answered
(26 responses)- A12% (3)
- B77% (20)
- C8% (2)
- D4% (1)
Explanation
https://aws.amazon.com/blogs/infrastructure-and-automation/securing-passwords-in-aws-quick- starts-using-aws-secrets-manager/
Topics
#Secrets Manager#CloudFormation#security best practices#database credentials#secret management
Community Discussion
No community discussion yet for this question.