Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 674 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C02

Question #: 674
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C02 Questions]

A company has an application that runs on Amazon EC2 instances and uses an Amazon Aurora database. The EC2 instances connect to the database by using user names and passwords that are stored locally in a file. The company wants to minimize the operational overhead of credential management.
What should a solutions architect do to accomplish this goal?

A. Use AWS Secrets Manager. Turn on automatic rotation.
B. Use AWS Systems Manager Parameter Store. Turn on automatic rotation.
C. Create an Amazon S3 bucket to store objects that are encrypted with an AWS Key Management Service (AWS KMS) encryption key. Migrate the credential file to the S3 bucket. Point the application to the S3 bucket.
D. Create an encrypted Amazon Elastic Block Store (Amazon EBS) volume for each EC2 instance. Attach the new EBS volume to each EC2 instance. Migrate the credential file to the new EBS volume. Point the application to the new EBS volume.

Show Suggested Answer

Suggested Answer: A 🗳️

by rodriiviru at Oct. 3, 2022, 11:59 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

jxp09

2 years, 8 months ago

Perfect A

upvoted 1 times

...

sivasumanth

2 years, 8 months ago

Selected Answer: A

Parameter Store doesn't support automatic rotation

upvoted 1 times

...

rodriiviru

2 years, 8 months ago

Selected Answer: A

Secrets Manager enables you to replace hardcoded credentials in your code, including passwords, with an API call to Secrets Manager to retrieve the secret programmatically. This helps ensure the secret can't be compromised by someone examining your code, because the secret no longer exists in the code. Also, you can configure Secrets Manager to automatically rotate the secret for you according to a specified schedule. This enables you to replace long-term secrets with short-term ones, significantly reducing the risk of compromise. https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html

upvoted 1 times

...