SOA-C03 · Question #98
A CloudOps engineer is designing a solution for an Amazon RDS for PostgreSQL DB instance. Database credentials must be stored and rotated monthly. The applications that connect to the DB instance…
The correct answer is C. Configure AWS Secrets Manager to automatically rotate the credentials for the DB instance. Use. AWS Secrets Manager is designed to store and automatically rotate database credentials, meeting the monthly rotation requirement without code changes. RDS Proxy manages database connections and pools them efficiently, protecting the DB instance during sudden spikes in client…
Question
A CloudOps engineer is designing a solution for an Amazon RDS for PostgreSQL DB instance. Database credentials must be stored and rotated monthly. The applications that connect to the DB instance send write-intensive traffic with variable client connections that sometimes increase significantly in a short period of time. Which solution should a CloudOps engineer choose to meet these requirements?
Options
- AConfigure AWS Key Management Service (AWS KMS) to automatically rotate the keys for the DB
- BConfigure AWS Key Management Service (AWS KMS) to automatically rotate the keys for the DB
- CConfigure AWS Secrets Manager to automatically rotate the credentials for the DB instance. Use
- DConfigure AWS Secrets Manager to automatically rotate the credentials for the DB instance. Use
How the community answered
(14 responses)- B7% (1)
- C79% (11)
- D14% (2)
Explanation
AWS Secrets Manager is designed to store and automatically rotate database credentials, meeting the monthly rotation requirement without code changes. RDS Proxy manages database connections and pools them efficiently, protecting the DB instance during sudden spikes in client connections and reducing connection overhead for a write- intensive workload.
Topics
Community Discussion
No community discussion yet for this question.