nerdexam
Amazon

SAA-C03 · Question #775

A company has workloads that run on AWS. Each workload has a separate Amazon RDS database. A security audit finds that the company does not meet a requirement to rotate the RDS master user credentials

Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #775. The question stem and answer options stay visible for context.

Submitted by zhang_li· Mar 4, 2026Design Secure Architectures

Question

A company has workloads that run on AWS. Each workload has a separate Amazon RDS database. A security audit finds that the company does not meet a requirement to rotate the RDS master user credentials every 30 days. Each RDS DB instance must also have a different set of credentials that are accessible only by the relevant application layer and by the team that supports the workload. Which solution will meet these requirements with the LEAST operational overhead?

Options

  • AUse AWS Secrets Manager to set up RDS password management. Use a combination of IAM
  • BUse AWS Secrets Manager to set up RDS password management. Use a combination of IAM
  • CCreate an Amazon Simple Notification Service (Amazon SNS) topic for each workload. Create a
  • DCreate an Amazon S3 bucket that uses AWS Key Management Service (AWS KMS) for

Unlock SAA-C03 to see the answer

You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SAA-C03 Practice