SAP-C02 · Question #474
A company is implementing a serverless architecture by using AWS Lambda functions that need to access a Microsoft SQL Server DB instance on Amazon RDS. The company has separate environments for develo
Sign in or unlock SAP-C02 to reveal the answer and full explanation for question #474. The question stem and answer options stay visible for context.
Question
A company is implementing a serverless architecture by using AWS Lambda functions that need to access a Microsoft SQL Server DB instance on Amazon RDS. The company has separate environments for development and production, including a clone of the database system. The company's developers are allowed to access the credentials for the development database. However, the credentials for the production database must be encrypted with a key that only members of the IT security team's IAM user group can access. This key must be rotated on a regular basis. What should a solutions architect do in the production environment to meet these requirements?
Options
- AStore the database credentials in AWS Systems Manager Parameter Store by using a
- BEncrypt the database credentials by using the AWS Key Management Service (AWS KMS)
- CStore the database credentials in the environment variables of each Lambda function. Encrypt the
- DStore the database credentials in AWS Secrets Manager as a secret that is associated with an
Unlock SAP-C02 to see the answer
You've previewed enough free SAP-C02 questions. Unlock SAP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.