A company is developing a two-tier web application on AWS. The company's developers have deployed the application on an Amazon EC2 instance that connects directly to a backend Amazon RDS database. The

Question

Options

• AStore the database credentials in the instance metadata. Use Amazon EventBridge (Amazon
• BStore the database credentials in a configuration file in an encrypted Amazon S3 bucket. Use
• CStore the database credentials as a secret in AWS Secrets Manager. Turn on automatic rotation
• DStore the database credentials as encrypted parameters in AWS Systems Manager Parameter

• A
  10% (3)
• B
  7% (2)
• C
  80% (24)
• D
  3% (1)

Explanation

Secrets manager supports Autorotation unlike Parameter store. AWS Secrets Manager is a service that enables you to easily rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle. By storing the database credentials as a secret in Secrets Manager, you can ensure that they are not hardcoded in the application and that they are automatically rotated on a regular basis. To grant the EC2 instance access to the secret, you can attach the required permission to the EC2 role. This will allow the application to retrieve the secret from Secrets Manager as needed. https://docs.aws.amazon.com/secretsmanager/latest/userguide/create_database_secret.html

No community discussion yet for this question.