DBS-C01 · Question #80
A company undergoing a security audit has determined that its Database Administrators are presently the company's Amazon Aurora deployment. To sharing an administrative database user account for…
The correct answer is B. Enable IAM database authentication on the Aurora cluster. Create a database user for each team. You can authenticate to your DB cluster using AWS IAM database authentication. With this authentication method, you don't need to use a password when you connect to a DB cluster. Instead, you use an authentication token that expires 15 minutes after creation.
Question
A company undergoing a security audit has determined that its Database Administrators are presently the company's Amazon Aurora deployment. To sharing an administrative database user account for support proper traceability, governance, and compliance, each Database Administration team member must start using individual, named accounts. Furthermore, long- term database user credentials should not be used. Which solution should the Database Specialist implement to meet these requirements?
Options
- AUse the AWS CLI to fetch the AWS IAM users and passwords for all team members. For each
- BEnable IAM database authentication on the Aurora cluster. Create a database user for each team
- CCreate a database user for each team member. Share the new database user credentials with the
- DCreate an IAM role and associate an IAM policy that grants the connect privilege using the shared
How the community answered
(20 responses)- A10% (2)
- B65% (13)
- C5% (1)
- D20% (4)
Explanation
You can authenticate to your DB cluster using AWS IAM database authentication. With this authentication method, you don't need to use a password when you connect to a DB cluster. Instead, you use an authentication token that expires 15 minutes after creation.
Topics
Community Discussion
No community discussion yet for this question.