Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 521 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C02

Question #: 521
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C02 Questions]

A company has several web servers that need to frequently access a common Amazon RDS MySQL Multi-AZ DB instance. The company wants a secure method for the web servers to connect to the database while meeting a security requirement to rotate user credentials frequently.
Which solution meets these requirements?

A. Store the database user credentials in AWS Secrets Manager. Grant the necessary IAM permissions to allow the web servers to access AWS Secrets Manager.
B. Store the database user credentials in AWS Systems Manager OpsCenter. Grant the necessary IAM permissions to allow the web servers to access OpsCenter.
C. Store the database user credentials in a secure Amazon S3 bucket. Grant the necessary IAM permissions to allow the web servers to retrieve credentials and access the database.
D. Store the database user credentials in files encrypted with AWS Key Management Service (AWS KMS) on the web server file system. The web server should be able to decrypt the files and access the database.

Show Suggested Answer

Suggested Answer: A 🗳️

by shamg at Dec. 15, 2021, 3:51 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

BlassArun

Highly Voted 3 years, 5 months ago

Answer is A. AWS Secrets Manager helps you protect secrets needed to access your applications, services, and IT resources. The service enables you to easily rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle.

upvoted 9 times

...

cloud_collector

Most Recent 2 years, 10 months ago

Selected Answer: A

Secrets Manager enables you to replace hardcoded credentials in your code, including passwords, with an API call to Secrets Manager to retrieve the secret programmatically. Also, you can configure Secrets Manager to automatically rotate the secret for you according to a specified schedule. https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html

upvoted 4 times

...