SAA-C03 · Question #359
A company has a web application that uses several web servers that run on Amazon EC2 instances. The instances use a shared Amazon RDS for MySQL database. The company requires a secure method to…
The correct answer is A. Store database credentials in AWS Secrets Manager. Create an AWS Lambda function to. AWS Secrets Manager is a fully managed service specifically designed to securely store and automatically rotate database credentials, API keys, and other secrets. Secrets Manager provides built-in integration with Amazon RDS for automatic credential rotation on a configurable…
Question
A company has a web application that uses several web servers that run on Amazon EC2 instances. The instances use a shared Amazon RDS for MySQL database. The company requires a secure method to store database credentials. The credentials must be automatically rotated every 30 days without affecting application availability. Which solution will meet these requirements?
Options
- AStore database credentials in AWS Secrets Manager. Create an AWS Lambda function to
- BStore database credentials in AWS Systems Manager OpsCenter. Grant the necessary IAM
- CStore database credentials in an Amazon S3 bucket. Create an AWS Lambda function to
- DStore the credentials in a local file on each of the web servers. Use an AWS KMS key to encrypt
How the community answered
(24 responses)- A88% (21)
- B8% (2)
- D4% (1)
Explanation
AWS Secrets Manager is a fully managed service specifically designed to securely store and automatically rotate database credentials, API keys, and other secrets. Secrets Manager provides built-in integration with Amazon RDS for automatic credential rotation on a configurable schedule without requiring downtime. It also manages the secure distribution of the credentials to authorized services, such as your web servers, using IAM policies. Manual solutions (S3, files, cron jobs) do not provide the same level of automation, audit, or security.
Community Discussion
No community discussion yet for this question.