SAA-C03 · Question #682
A company has several web servers that need to frequently access a common Amazon RDS MySQL Multi-AZ DB instance. The company wants a secure method for the web servers to connect to the database…
To securely connect web servers to an RDS MySQL instance and frequently rotate user credentials, AWS Secrets Manager is the ideal solution.
Question
A company has several web servers that need to frequently access a common Amazon RDS MySQL Multi-AZ DB instance. The company wants a secure method for the web servers to connect to the database while meeting a security requirement to rotate user credentials frequently. Which solution meets these requirements?
Options
- AStore the database user credentials in AWS Secrets Manager.
- BStore the database user credentials in AWS Systems Manager OpsCenter.
- CStore the database user credentials in a secure Amazon S3 bucket.
- DStore the database user credentials in files encrypted with AWS Key Management Service (AWS
Why each option
To securely connect web servers to an RDS MySQL instance and frequently rotate user credentials, AWS Secrets Manager is the ideal solution.
AWS Systems Manager OpsCenter is used for operational tasks and aggregating operational issues, not for secure credential storage and rotation.
Storing credentials in an S3 bucket, even a secure one, lacks the native automatic rotation capabilities and robust access management features that Secrets Manager provides, making it less secure and harder to manage for frequent rotation.
Storing credentials in KMS-encrypted files provides encryption at rest but does not offer automatic rotation, secure programmatic retrieval, or seamless integration with RDS for credential management, making it an incomplete solution for the stated requirements.
Concept tested: Secure Credential Management and Automatic Rotation with Secrets Manager
Source: https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html
Community Discussion
No community discussion yet for this question.