A company runs its databases on Amazon RDS for PostgreSQL. The company wants a secure solution to manage the master user password by rotating the password every 30 days. Which solution will meet these

Question

Options

• AUse Amazon EventBridge to schedule a custom AWS Lambda function to rotate the password
• BUse the modlfy-db-instance command in the AWS CLI to change the password.
• CIntegrate AWS Secrets Manager with Amazon RDS for PostgreSQL to automate password
• DIntegrate AWS Systems Manager Parameter Store with Amazon RDS for PostgreSQL to

• A
  4% (1)
• B
  17% (4)
• C
  70% (16)
• D
  9% (2)

Explanation

AWSSecrets Managercan integrate directly with Amazon RDS for automatic and seamless password rotation. Secrets Manager handles the complexity of password management, including generating strong passwords and rotating them at a defined interval (e.g., every 30 days). It also automatically updates the connection information for RDS, minimizing operational overhead. Option A (Lambda with EventBridge): While possible, this requires custom coding and operational management of Lambda, which introduces additional complexity. Option B (Manual password change): Using the modify-db-instance command requires manual intervention and is not automated, leading to more operational effort. Option D (Parameter Store): Systems Manager Parameter Store is less specialized for password management than Secrets Manager and does not have built-in automated rotation for RDS

No community discussion yet for this question.