DVA-C02 · Question #661
A company runs a critical application on AWS. The application uses credentials to access an Amazon RDS database. As part of a risk assessment to analyze security vulnerabilities, the company found…
The correct answer is A. Configure AWS Secrets Manager to store the database credentials. Schedule managed rotation. AWS Secrets Manager provides a secure vault for your database credentials and natively supports managed rotation for Amazon RDS. By storing the credentials in Secrets Manager and enabling automatic rotation, the service handles secure retrieval by your application and rotates…
Question
A company runs a critical application on AWS. The application uses credentials to access an Amazon RDS database. As part of a risk assessment to analyze security vulnerabilities, the company found that database credentials are not frequently rotated. A developer needs to implement a solution that securely stores and rotates the credentials. The solution must not expose the credentials to anyone who should not have access to the credentials. Which solution will meet these requirements?
Options
- AConfigure AWS Secrets Manager to store the database credentials. Schedule managed rotation
- BConfigure the Systems Manager parameters with an AWS KMS AWS managed key to encrypt
- CConfigure an Amazon S3 bucket with S3 Bucket Keys for server-side encryption with AWS KMS
- DConfigure the Systems Manager parameters with an AWS KMS customer managed key to
How the community answered
(42 responses)- A88% (37)
- B7% (3)
- C2% (1)
- D2% (1)
Explanation
AWS Secrets Manager provides a secure vault for your database credentials and natively supports managed rotation for Amazon RDS. By storing the credentials in Secrets Manager and enabling automatic rotation, the service handles secure retrieval by your application and rotates the credentials on schedule without exposing them to unauthorized users.
Community Discussion
No community discussion yet for this question.