SOA-C03 · Question #146
SOA-C03 Question #146: Real Exam Question with Answer & Explanation
The correct answer is B: Add the credentials to AWS Secrets Manager.. AWS CloudOps documentation clearly states that AWS Secrets Manager is the recommended service for storing and managing database credentials securely. Secrets Manager integrates natively with Amazon RDS and supports automatic, scheduled secret rotation. To rotate credentials weekl
Question
A SysOps administrator needs to implement a solution that protects credentials for an Amazon RDS for MySQL DB instance. The solution must rotate the credentials automatically one time every week. Which combination of steps will meet these requirements? (Choose two.)
Options
- AConfigure an RDS proxy to store the credentials.
- BAdd the credentials to AWS Secrets Manager.
- CAdd the credentials to AWS Systems Manager Parameter Store.
- DCreate an AWS Lambda function to rotate the credentials.
- ECreate an AWS Systems Manager Automation runbook to rotate the credentials.
Explanation
AWS CloudOps documentation clearly states that AWS Secrets Manager is the recommended service for storing and managing database credentials securely. Secrets Manager integrates natively with Amazon RDS and supports automatic, scheduled secret rotation. To rotate credentials weekly, Secrets Manager requires a Lambda rotation function. AWS provides managed rotation templates for Amazon RDS for MySQL that update the database password and the stored secret atomically. This combination ensures credentials are protected, rotated automatically, and audited with minimal operational effort.
Community Discussion
No community discussion yet for this question.