Exam AWS Certified SysOps Administrator - Associate topic 1 question 108 discussion

Exam question from Amazon's AWS Certified SysOps Administrator - Associate

Question #: 108
Topic #: 1

[All AWS Certified SysOps Administrator - Associate Questions]

A SysOps administrator is designing a solution for an Amazon RDS for PostgreSQL DB instance. Database credentials must be stored and rotated monthly. The applications that connect to the DB instance send write-intensive traffic with variable client connections that sometimes increase significantly in a short period of time.
Which solution should a SysOps administrator choose to meet these requirements?

A. Configure AWS Key Management Service (AWS KMS) to automatically rotate the keys for the DB instance. Use RDS Proxy to handle the increases in database connections.
B. Configure AWS Key Management Service (AWS KMS) to automatically rotate the keys for the DB instance. Use RDS read replicas to handle the increases in database connections.
C. Configure AWS Secrets Manager to automatically rotate the credentials for the DB instance. Use RDS Proxy to handle the increases in database connections.
D. Configure AWS Secrets Manager to automatically rotate the credentials for the DB instance. Use RDS read replicas to handle the increases in database connections.

Show Suggested Answer

Suggested Answer: C 🗳️

by haxaffee at Sept. 4, 2022, 6:25 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

englishborn

Highly Voted 1 year, 10 months ago

Selected Answer: C

It cannot be A or B as KMS cannot hold DB credentials, therefore must be Secrets Manager It cannot be D as the question states "Write intensive" so read only replicas cannot do this. Has to be C

upvoted 12 times

...

haxaffee

Highly Voted 2 years, 5 months ago

Selected Answer: C

I thinnk C is correct since we are talking about writing to the DB. It is indeed available: Amazon RDS Proxy is available for Amazon Aurora with MySQL compatibility, Amazon Aurora with PostgreSQL compatibility, Amazon RDS for MariaDB, Amazon RDS for MySQL, and Amazon RDS for PostgreSQL.

upvoted 6 times

...

muznorton

Most Recent 8 months ago

Selected Answer: C

1. Credentials Management Why AWS Secrets Manager? AWS Secrets Manager is designed specifically to manage, store, and automatically rotate database credentials securely. It is the most suitable solution for the requirement to rotate credentials monthly for an Amazon RDS instance. AWS Key Management Service (KMS) is used for encrypting data, not managing database credentials. Thus, KMS does not meet the credentials rotation requirement. 2. Handling Write-Intensive Traffic and Connection Spikes Why RDS Proxy? RDS Proxy manages database connections efficiently by pooling and reusing connections, which is critical for applications with variable and spiking client connections. It helps in reducing the database's memory and CPU overhead, especially during sudden connection surges. Read replicas are useful for scaling read-only workloads, but they do not assist with write-intensive traffic or connection pooling.

upvoted 2 times

...