DVA-C02 · Question #212
A company needs to set up secure database credentials for all its AWS Cloud resources. The company's resources include Amazon RDS DB instances, Amazon DocumentDB clusters, and Amazon Aurora DB instanc
The correct answer is D. Create an AWS Lambda function by using the SecretsManagerRotationTemplate template in the. AWS Secrets Manager is the most secure and purpose-built service for managing database credentials, supporting automatic rotation, encryption at rest, and fine-grained access control. Using the SecretsManagerRotationTemplate with a Lambda function enables automatic rotation accor
Question
A company needs to set up secure database credentials for all its AWS Cloud resources. The company's resources include Amazon RDS DB instances, Amazon DocumentDB clusters, and Amazon Aurora DB instances. The company's security policy mandates that database credentials be encrypted at rest and rotated at a regular interval. Which solution will meet these requirements MOST securely?
Options
- ASet up IAM database authentication for token-based access. Generate user tokens to provide
- BCreate parameters for the database credentials in AWS Systems Manager Parameter Store. Set
- CStore the database access credentials as an encrypted Amazon S3 object in an S3 bucket. Block
- DCreate an AWS Lambda function by using the SecretsManagerRotationTemplate template in the
How the community answered
(26 responses)- A23% (6)
- B8% (2)
- C12% (3)
- D58% (15)
Explanation
AWS Secrets Manager is the most secure and purpose-built service for managing database credentials, supporting automatic rotation, encryption at rest, and fine-grained access control. Using the SecretsManagerRotationTemplate with a Lambda function enables automatic rotation according to a defined schedule, fulfilling both security and policy requirements for RDS, DocumentDB, and Aurora.
Community Discussion
No community discussion yet for this question.