nerdexam
Amazon

DBS-C01 · Question #152

A company has an AWS CloudFormation template written in JSON that is used to launch new Amazon RDS for MySQL DB instances. The security team has asked a database specialist to ensure that the master p

The correct answer is B. Create an AWS Lambda function to rotate the secret.. https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource- secretsmanager-rotationschedule.html

Submitted by yuki_2020· Mar 6, 2026Database Security

Question

A company has an AWS CloudFormation template written in JSON that is used to launch new Amazon RDS for MySQL DB instances. The security team has asked a database specialist to ensure that the master password is automatically rotated every 30 days for all new DB instances that are launched using the template. What is the MOST operationally efficient solution to meet these requirements?

Options

  • ASave the password in an Amazon S3 object.
  • BCreate an AWS Lambda function to rotate the secret.
  • CModify the CloudFormation template to use the AWS KMS key as the database password.
  • DIntegrate the Amazon RDS for MySQL DB instances with AWS IAM and centrally manage the

How the community answered

(33 responses)
  • A
    6% (2)
  • B
    70% (23)
  • C
    15% (5)
  • D
    9% (3)

Explanation

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource- secretsmanager-rotationschedule.html

Topics

#RDS MySQL#password rotation#AWS Secrets Manager#AWS Lambda

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full DBS-C01 Practice