SAP-C02 · Question #302
A company is using Amazon Aurora MySQL for a customer relationship management (CRM) application. The application requires frequent maintenance on the database and the Amazon EC2 instances on which…
The correct answer is C. Enable IAM database authentication on the database. To allow an IAM user or role to connect to your DB cluster, you must create an IAM policy. After that, you attach the policy to an IAM user or role. https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.IAMDBAuth.I
Question
A company is using Amazon Aurora MySQL for a customer relationship management (CRM) application. The application requires frequent maintenance on the database and the Amazon EC2 instances on which the application runs. For AWS Management Console access, the system administrators authenticate against AWS Identity and Access Management (IAM) using an internal identity provider. For database access, each system administrator has a user name and password that have previously been configured within the database. A recent security audit revealed that the database passwords are not frequently rotated. The company wants to replace the passwords with temporary credentials using the company's existing AWS access controls. Which set of options will meet the company's requirements?
Options
- ACreate a new AWS Systems Manager Parameter Store entry for each database password.
- BCreate a new AWS Secrets Manager entry for each database password.
- CEnable IAM database authentication on the database.
- DEnable IAM database authentication on the database.
How the community answered
(26 responses)- A4% (1)
- B4% (1)
- C85% (22)
- D8% (2)
Explanation
To allow an IAM user or role to connect to your DB cluster, you must create an IAM policy. After that, you attach the policy to an IAM user or role. https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.IAMDBAuth.I
Community Discussion
No community discussion yet for this question.