DVA-C02 · Question #628
A developer is modifying an AWS Lambda function that accesses an Amazon RDS for MySQL database. The developer discovers that the Lambda function has the database credentials stored as plaintext in the
The correct answer is A. Move the credentials to a secret in AWS Secrets Manager. Modify the Lambda function to read. AWS Secrets Manager is designed to securely store and manage sensitive credentials. It provides built-in support for automated rotation (including every 30 days) and can integrate seamlessly with your Lambda function, eliminating the need to embed plaintext credentials in your co
Question
A developer is modifying an AWS Lambda function that accesses an Amazon RDS for MySQL database. The developer discovers that the Lambda function has the database credentials stored as plaintext in the Lambda function code. The developer must implement a solution to make the credentials more secure. The solution must include automated credential rotation every 30 days. Which solution will meet these requirements?
Options
- AMove the credentials to a secret in AWS Secrets Manager. Modify the Lambda function to read
- BMove the credentials to a secure string parameter in AWS Systems Manager Parameter Store.
- CMove the credentials to an encrypted Amazon S3 bucket. Modify the Lambda function to read
- DMove the credentials to a secure string parameter in AWS Systems Manager Parameter Store.
How the community answered
(62 responses)- A74% (46)
- B8% (5)
- C3% (2)
- D15% (9)
Explanation
AWS Secrets Manager is designed to securely store and manage sensitive credentials. It provides built-in support for automated rotation (including every 30 days) and can integrate seamlessly with your Lambda function, eliminating the need to embed plaintext credentials in your code. This approach enhances security while reducing manual intervention.
Community Discussion
No community discussion yet for this question.