A company requires the rotation of administrative credentials for production workloads on a regular basis. A CloudOps engineer must implement this policy for an Amazon RDS DB instance's master user…

Question

Options

• ACreate an AWS Lambda function to change the RDS master user password. Create an Amazon
• BCreate a new SecureString parameter in AWS Systems Manager Parameter Store. Encrypt the
• CCreate a new String parameter in AWS Systems Manager Parameter Store. Configure automatic
• DCreate a new RDS database secret in AWS Secrets Manager. Apply the secret to the RDS DB

• A
  5% (2)
• B
  7% (3)
• C
  17% (7)
• D
  71% (30)

Explanation

AWS Secrets Manager natively supports credential management and automatic rotation for Amazon RDS master user passwords. When a secret is associated with an RDS instance, Secrets Manager automatically updates the password both in the secret and on the database, without downtime or manual scripting. "AWS Secrets Manager can automatically rotate the master user password for Amazon RDS databases. Rotation is fully managed and integrated, requiring no custom code or maintenance." Option A introduces unnecessary Lambda automation. Option B and C use Parameter Store, which does not provide direct RDS password rotation. Therefore, Option D achieves secure, automatic credential rotation with least operational effort, fully aligned with CloudOps security automation principles.

No community discussion yet for this question.