SOA-C02 · Question #668
A company requires the rotation of administrative credentials for production workloads on a regular basis. A SysOps administrator must implement this policy for an Amazon RDS DB instance's master…
The correct answer is D. Create a new RDS database secret in AWS Secrets Manager. Apply the secret to the RDS DB. The best way to automate the rotation of administrative credentials for an Amazon RDS DB instance with minimal operational effort is to use AWS Secrets Manager. AWS Secrets Manager supports automatic credential rotation for Amazon RDS, making it the most efficient solution…
Question
A company requires the rotation of administrative credentials for production workloads on a regular basis. A SysOps administrator must implement this policy for an Amazon RDS DB instance's master user password. Which solution will meet this requirement with the LEAST operational effort?
Options
- ACreate an AWS Lambda function to change the RDS master user password. Create an Amazon
- BCreate a new SecureString parameter in AWS Systems Manager Parameter Store. Encrypt the
- CCreate a new String parameter in AWS Systems Manager Parameter Store. Configure automatic
- DCreate a new RDS database secret in AWS Secrets Manager. Apply the secret to the RDS DB
How the community answered
(30 responses)- A10% (3)
- B3% (1)
- C3% (1)
- D83% (25)
Explanation
The best way to automate the rotation of administrative credentials for an Amazon RDS DB instance with minimal operational effort is to use AWS Secrets Manager. AWS Secrets Manager supports automatic credential rotation for Amazon RDS, making it the most efficient solution. Automatic rotation can be configured directly within Secrets Manager, ensuring that credentials are updated at a specified interval without manual intervention. AWS Secrets Manager integrates seamlessly with RDS and supports rotation without downtime using a Lambda-based rotation mechanism.
Topics
Community Discussion
No community discussion yet for this question.