nerdexam
Amazon

SAA-C03 · Question #85

A company is designing a new internal web application in the AWS Cloud. The new application must securely retrieve and store multiple employee usernames and passwords from an AWS managed service. Whic

The correct answer is D. Store the employee credentials in AWS Secrets Manager. Use AWS Cloud Formation and the. AWSSecrets Manageris the best solution for securely storing and managing sensitive information, such as usernames and passwords. Secrets Manager provides automatic rotation, fine-grained access control, and encryption of credentials. It is designed to integrate easily with other

Submitted by zhang_li· Mar 4, 2026Design Secure Architectures

Question

A company is designing a new internal web application in the AWS Cloud. The new application must securely retrieve and store multiple employee usernames and passwords from an AWS managed service. Which solution will meet these requirements with the LEAST operational overhead?

Options

  • AStore the employee credentials in AWS Systems Manager Parameter Store. Use AWS Cloud
  • BStore the employee credentials in AWS Secrets Manager. Use AWS Cloud Formation and AWS
  • CStore the employee credentials in AWS Systems Manager Parameter Store. Use AWS Cloud
  • DStore the employee credentials in AWS Secrets Manager. Use AWS Cloud Formation and the

How the community answered

(53 responses)
  • A
    2% (1)
  • B
    4% (2)
  • C
    2% (1)
  • D
    92% (49)

Explanation

AWSSecrets Manageris the best solution for securely storing and managing sensitive information, such as usernames and passwords. Secrets Manager provides automatic rotation, fine-grained access control, and encryption of credentials. It is designed to integrate easily with other AWS services, such as CloudFormation, to automate the retrieval of secrets via theBatchGetSecretValue API. Secrets Manager has a lower operational overhead than manually managing credentials, and it offers features like automatic secret rotation that reduce the need for human intervention. Option A and C (Parameter Store): While Systems Manager Parameter Store can store secrets, Secrets Manager provides more specialized capabilities for securely managing and rotating credentials with less operational overhead. Option B and C (AWS Batch): Introducing AWS Batch unnecessarily complicates the solution. Secrets Manager already provides simple API calls for retrieving secrets without needing an additional service.

Community Discussion

No community discussion yet for this question.

Full SAA-C03 Practice