nerdexam
Amazon

SOA-C02 · Question #449

A SysOps administrator needs to secure the credentials for an Amazon RDS database that is created by an AWS CloudFormation template. The solution must encrypt the credentials and must support…

The correct answer is A. Create an AWS::SecretsManager::Secret resource in the CloudF ormation template. Reference. AWS::SecretsManager::Secret resource to create secret and resolve:secretsmanager dynamic https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html https://docs.aws.amazon.com/secretsmanager/latest/userguide/cfn-example_reference-

Submitted by asante_acc· Mar 30, 2026Security and Compliance

Question

A SysOps administrator needs to secure the credentials for an Amazon RDS database that is created by an AWS CloudFormation template. The solution must encrypt the credentials and must support automatic rotation. Which solution will meet these requirements?

Options

  • ACreate an AWS::SecretsManager::Secret resource in the CloudF ormation template. Reference
  • BCreate an AWS::SecretsManager::Secret resource in the CloudFormation template. Reference
  • CCreate an AWS::SSM::Parameter resource in he CloudFormation template. Reference the
  • DCreate parameters for the database credentials in the CloudFormation template. Use the Ref

How the community answered

(46 responses)
  • A
    78% (36)
  • B
    2% (1)
  • C
    7% (3)
  • D
    13% (6)

Explanation

AWS::SecretsManager::Secret resource to create secret and resolve:secretsmanager dynamic https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html https://docs.aws.amazon.com/secretsmanager/latest/userguide/cfn-example_reference-

Topics

#AWS Secrets Manager#CloudFormation#credential rotation#RDS security

Community Discussion

No community discussion yet for this question.

Full SOA-C02 Practice