Exam AWS Certified Developer Associate All Questions

View all questions & answers for the AWS Certified Developer Associate exam

Exam AWS Certified Developer Associate topic 1 question 90 discussion

Exam question from Amazon's AWS Certified Developer Associate

Question #: 90
Topic #: 1

[All AWS Certified Developer Associate Questions]

An application running on Amazon EC2 opens connections to an Amazon RDS SQL Server database. The developer does not want to store the user name and password for the database in the code. The developer would also like to automatically rotate the credentials.
What is the MOST secure way to store and access the database credentials?

A. Create an IAM role that has permissions to access the database. Attach the role to the EC2 instance.
B. Use AWS Secrets Manager to store the credentials. Retrieve the credentials from Secrets Manager as needed.
C. Store the credentials in an encrypted text file in an Amazon S3 bucket. Configure the EC2 instance's user data to download the credentials from Amazon S3 as the instance boots.
D. Store the user name and password credentials directly in the source code. No further action is needed because the source code is stored in a private repository.

Show Suggested Answer

Suggested Answer: B 🗳️

by quanlh at Aug. 18, 2020, 9:29 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

RicardoD

Highly Voted 3 years, 8 months ago

B is the answer Store DB credentials at secrets manager

upvoted 16 times

...

quanlh

Highly Voted 3 years, 10 months ago

B is correct

upvoted 5 times

...

sumanshu

Most Recent 7 months ago

Selected Answer: B

B) correct - Secrets Manager provides a built-in ability to automatically rotate credentials, ensuring that they are updated regularly without the need for manual intervention.

upvoted 1 times

...

Baalhammun

1 year, 3 months ago

Selected Answer: B

RDS is integrated with Secrets Manager, also it offers automatic key rotation, B is the correct answer

upvoted 1 times

...

rcaliandro

2 years ago

Selected Answer: B

"Rotate Credentials" => the best and secure option to store creadentials is by using AWS Secrets Manager. The right answer is B

upvoted 1 times

...

sichilam

2 years, 6 months ago

B is the answer

upvoted 1 times

...

Dirisme

2 years, 6 months ago

The keyword is rotate hints at secrets manager

upvoted 1 times

...

haazybanj

2 years, 9 months ago

Selected Answer: B

B is the answer

upvoted 1 times

...

LaXuanLinh

2 years, 11 months ago

Selected Answer: B

A is not correct because SQL Server does not support IAM credentials The question asks specifically about storing username and password and rotation, so Secret manager is the way to go

upvoted 5 times

...

mike_0

3 years, 2 months ago

B- key rotation

upvoted 2 times

...

cloudbusting

3 years, 2 months ago

it talks about credentials so B

upvoted 1 times

...

SpeedRunner

3 years, 2 months ago

Selected Answer: A

https://aws.amazon.com/premiumsupport/knowledge-center/users-connect-rds-iam/ We can use IAM to connect to Amazon RDS SQL. Moreover the question has been changed more accurately by asking "MOST secure way". Read the post above, IAM is the more secure than any other methods. ACloud guru explained that IAM role's token is remaining only temporarily so we can say the credentials will be automatically rotated.

upvoted 1 times

sichilam

2 years, 6 months ago

Whenever you want to access data in DB, you have to login. So you need UserID/Pwd to log into database. You can access the database from your home laptop too if you setup access control list (whitelist). All you have to have is userid/pwd

upvoted 1 times

...

robbyboss

2 years, 10 months ago

MS SQL is not supported for IAM (only MySQL and PostgreSQL)

upvoted 3 times

...

JP_PA

3 years, 5 months ago

Selected Answer: B

ANS: B

upvoted 2 times

...

Sayto

3 years, 8 months ago

Remember that sql servers don't support IAM database authentication.

upvoted 2 times

Gomer

3 years ago

Possibly true for MS SQL Server. However, If Aurora is used to emulate SQL, it can be accessed by a role. I didn't think this was the case either until I researched it. Amazon has enhanced Aurora to utilize roles/token access. I think answer is still B. though. Selling point of Secret's Manager is the automatic key rotation.

upvoted 1 times

...