SAA-C03 · Question #753
A company has an application that runs on Amazon EC2 instances and uses an Amazon Aurora database. The EC2 Instances connect to the Aurora database by using user names and passwords that the company…
The correct answer is A. Store the credentials as a secret within AWS Secrets Manager. Assign IAM permissions to the. AWS Secrets Manager enables secure storage and automatic rotation of database credentials. By storing the credentials as a secret, assigning IAM permissions, and enabling monthly rotation, the application can retrieve updated credentials programmatically, minimizing operational…
Question
A company has an application that runs on Amazon EC2 instances and uses an Amazon Aurora database. The EC2 Instances connect to the Aurora database by using user names and passwords that the company stores locally in a file. The company changes the user names and passwords every month. The company wants to minimize the operational overhead of credential management. Which solution will meet these requirements?
Options
- AStore the credentials as a secret within AWS Secrets Manager. Assign IAM permissions to the
- BUse AWS Systems Manager Parameter Store to create a new parameter for the credentials. Use
- CCreate an Amazon S3 bucket to store objects. Use an AWS Key Management Service (AWS
- DCreate an encrypted Amazon Elastic Block Store (Amazon EBS) volume for each EC2 Instance.
How the community answered
(49 responses)- A73% (36)
- B14% (7)
- C4% (2)
- D8% (4)
Explanation
AWS Secrets Manager enables secure storage and automatic rotation of database credentials. By storing the credentials as a secret, assigning IAM permissions, and enabling monthly rotation, the application can retrieve updated credentials programmatically, minimizing operational overhead and eliminating the need to manually update credentials.
Community Discussion
No community discussion yet for this question.