DVA-C02 · Question #199
A company is using AWS CloudFormation to deploy a two-tier application. The application will use Amazon RDS as its backend database. The company wants a solution that will randomly generate the databa
The correct answer is D. Use an AWS Secrets Manager resource to generate and rotate the password.. https://docs.aws.amazon.com/secretsmanager/latest/userguide/cfn-example_RDSsecret.html
Question
A company is using AWS CloudFormation to deploy a two-tier application. The application will use Amazon RDS as its backend database. The company wants a solution that will randomly generate the database password during deployment. The solution also must automatically rotate the database password without requiring changes to the application. What is the MOST operationally efficient solution that meets these requirements?
Options
- AUse an AWS Lambda function as a CloudFormation custom resource to generate and rotate the
- BUse an AWS Systems Manager Parameter Store resource with the SecureString data type to
- CUse a cron daemon on the application's host to generate and rotate the password.
- DUse an AWS Secrets Manager resource to generate and rotate the password.
How the community answered
(32 responses)- A6% (2)
- B3% (1)
- C9% (3)
- D81% (26)
Explanation
https://docs.aws.amazon.com/secretsmanager/latest/userguide/cfn-example_RDSsecret.html
Community Discussion
No community discussion yet for this question.