nerdexam
Amazon

DOP-C02 · Question #468

A company requires all employees to access secrets via Systems Manager Parameter Store with rotation every 60 days. The company must add a new secret for an Amazon ElastiCache Redis cluster. Which…

The correct answer is D. Create the secret in Secrets Manager with Lambda rotation using Redis rotation template and 60-. AWS Secrets Manager supports managed rotation using Lambda templates for ElastiCache (Redis). Secrets Manager can integrate with Parameter Store using references ({{resolve:secretsmanager:...}}). This ensures automatic rotation with minimal management.

Submitted by javi_es· Mar 6, 2026Security and Compliance

Question

A company requires all employees to access secrets via Systems Manager Parameter Store with rotation every 60 days. The company must add a new secret for an Amazon ElastiCache Redis cluster. Which solution meets these requirements with the LEAST operational overhead?

Options

  • ACreate the secret in Secrets Manager with managed rotation (60 days). Reference via Parameter
  • BCreate the secret in Parameter Store with automatic rotation (unsupported).
  • CCreate the secret in Parameter Store and Lambda rotation (manual).
  • DCreate the secret in Secrets Manager with Lambda rotation using Redis rotation template and 60-

How the community answered

(21 responses)
  • A
    10% (2)
  • B
    5% (1)
  • C
    5% (1)
  • D
    81% (17)

Explanation

AWS Secrets Manager supports managed rotation using Lambda templates for ElastiCache (Redis). Secrets Manager can integrate with Parameter Store using references ({{resolve:secretsmanager:...}}). This ensures automatic rotation with minimal management.

Topics

#AWS Secrets Manager#Parameter Store#Secret Rotation#ElastiCache

Community Discussion

No community discussion yet for this question.

Full DOP-C02 Practice