SAA-C03 · Question #728
SAA-C03 Question #728: Real Exam Question with Answer & Explanation
The correct answer is A: Store the database credentials in AWS Secrets Manager. Turn on rotation. Write code in the. AWS Secrets Manager securely stores database credentials and supports automatic rotation. By retrieving credentials at runtime from Secrets Manager, Lambda functions - including those deployed with aliases or previous versions - always use the most current credentials without nee
Question
A company's solutions architect is building a static website to be deployed in Amazon S3 for a production environment. The website integrates with an Amazon Aurora PostgreSQL database by using an AWS Lambda function. The website that is deployed to production will use a Lambda alias that points to a specific version of the Lambda function. The company must rotate the database credentials every 2 weeks. Lambda functions that the company deployed previously must be able to use the most recent credentials. Which solution will meet these requirements?
Options
- AStore the database credentials in AWS Secrets Manager. Turn on rotation. Write code in the
- BInclude the database credentials as part of the Lambda function code. Update the credentials
- CUse Lambda environment variables. Update the environment variables when new credentials are
- DStore the database credentials in AWS Systems Manager Parameter Store. Turn on rotation.
Explanation
AWS Secrets Manager securely stores database credentials and supports automatic rotation. By retrieving credentials at runtime from Secrets Manager, Lambda functions - including those deployed with aliases or previous versions - always use the most current credentials without needing code redeployment or environment variable updates.
Community Discussion
No community discussion yet for this question.