SAP-C02 · Question #842
A company uses AWS Organizations for a multi-account setup. The company uses AWS Transit Gateway for cross-account VPC connectivity. An application deployed in an AWS application account uses Amazon R
Sign in or unlock SAP-C02 to reveal the answer and full explanation for question #842. The question stem and answer options stay visible for context.
Question
A company uses AWS Organizations for a multi-account setup. The company uses AWS Transit Gateway for cross-account VPC connectivity. An application deployed in an AWS application account uses Amazon RDS. The company's database administrators manage databases from a separate DBA account. The database administrators access the RDS database through an Amazon EC2 instance provisioned in the DBA account. The default AWS managed key encrypts database credentials that are stored in AWS Secrets Manager in the application account. The application team manually shares the secrets with the database administrators. The company needs a solution to grant database administrators access to the RDS database without sharing any secrets. Which solution will meet these requirements?
Options
- AIn the application account, create an IAM role with the required permissions to access the secrets
- BIn the DBA account, create an IAM role with the required permissions to access the secrets and
- CIn the DBA account, create an IAM role with the required permissions to access the secrets in the
- DUse AWS Resource Access Manager (AWS RAM) to share the secrets from the application
Unlock SAP-C02 to see the answer
You've previewed enough free SAP-C02 questions. Unlock SAP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.