Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 136 discussion

Exam question from Amazon's AWS Certified Developer - Associate DVA-C02

Question #: 136
Topic #: 1

[All AWS Certified Developer - Associate DVA-C02 Questions]

A developer is setting up a deployment pipeline. The pipeline includes an AWS CodeBuild build stage that requires access to a database to run integration tests. The developer is using a buildspec.yml file to configure the database connection. Company policy requires automatic rotation of all database credentials.

Which solution will handle the database credentials MOST securely?

A. Retrieve the credentials from variables that are hardcoded in the buildspec.yml file. Configure an AWS Lambda function to rotate the credentials.
B. Retrieve the credentials from an environment variable that is linked to a SecureString parameter in AWS Systems Manager Parameter Store. Configure Parameter Store for automatic rotation.
C. Retrieve the credentials from an environment variable that is linked to an AWS Secrets Manager secret. Configure Secrets Manager for automatic rotation.
D. Retrieve the credentials from an environment variable that contains the connection string in plaintext. Configure an Amazon EventBridge event to rotate the credentials.

Show Suggested Answer

Suggested Answer: C 🗳️

by cloudenthusiast at Aug. 4, 2023, 1:39 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

thalasi

1 month, 1 week ago

Selected Answer: C

SecureString parameter in AWS Systems Manager Parameter Store wont support auto rotation

upvoted 1 times

...

65703c1

7 months, 1 week ago

Selected Answer: C

C is the correct answer.

upvoted 2 times

...

rimaSamir

11 months ago

Answer is C as CodeBuild already supports Secret Manager

upvoted 2 times

...

Gold07

1 year, 3 months ago

c is the correct answer

upvoted 4 times

...

cmonthatsme

1 year, 4 months ago

Selected Answer: C

Secure + Rotation are key words for Secrets Manager

upvoted 4 times

...

Parsons

1 year, 4 months ago

Selected Answer: C

C is correct. Explanation: "requires automatic rotation of all database credentials" => "Secrets Manager for automatic rotation." With the Systems Manager Parameter Store, you have to do that manually.

upvoted 4 times

...

cloudenthusiast

1 year, 4 months ago

Selected Answer: C

Because configure Secrets Manager for automatic rotation

upvoted 2 times

...