Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 118 discussion

option C: Create a database user. Store the user name and password in an AWS Secrets Manager secret that has daily rotation enabled. This will allow the developer to securely store the database credentials and automatically rotate them at least weekly to meet the company’s security requirements.

It can automatically rotate the credentials for supported databases A) Eliminated - it does not natively support automatic credential rotation for databases.

Correct Answer should be A: This approach centralizes credential management and provides secure storage. Rotation can be scheduled weekly as required by the security team1.

C is the correct answer.

C. Create a database user. Store the user name and password in an AWS Secrets Manager secret that has daily rotation enabled: This is the correct solution. AWS Secrets Manager is specifically designed to handle secrets like database credentials, including their rotation. You can configure Secrets Manager to automatically rotate the credentials as frequently as needed (e.g., daily or weekly), which aligns with the security team's requirements.

rotation key & cross account key is feature of Secret Manager https://tutorialsdojo.com/aws-secrets-manager-vs-systems-manager-parameter-store/

https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotating-secrets.html https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_turn-on-for-other.html https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_schedule.html

the keyword is "rotation"