A manufacturing company uses an Amazon RDS DB instance to store inventory of all stock items. The company maintains several AWS Lambda functions that interact with the database to add, update, and…

Question

Options

• AStore the database password as an environment variable for each Lambda function. Create a
• BUse AWS Key Management Service (AWS KMS) to encrypt the database password and to store
• CUse AWS Secrets Manager to store credentials for the database. Create a Secrets Manager
• DUse AWS Systems Manager Parameter Store to create a secure string to store credentials for the

• A
  11% (5)
• B
  2% (1)
• C
  83% (39)
• D
  4% (2)

Explanation

With this solution, AWS Secrets Manager will handle the rotation of the database password automatically every 30 days, ensuring that the credentials are never stored in plaintext and are regularly updated. The Lambda functions can securely access the database password from Secrets Manager, eliminating the need for hardcoded credentials in the code. Using Secrets Manager to manage the credentials and rotation of the database password is a best practice for securely handling sensitive information in AWS environments.

No community discussion yet for this question.