Exam AWS Certified SysOps Administrator - Associate topic 1 question 142 discussion

Exam question from Amazon's AWS Certified SysOps Administrator - Associate

Question #: 142
Topic #: 1

[All AWS Certified SysOps Administrator - Associate Questions]

A SysOps administrator needs to configure automatic rotation for Amazon RDS database credentials. The credentials must rotate every 30 days. The solution must integrate with Amazon RDS.

Which solution will meet these requirements with the LEAST operational overhead?

A. Store the credentials in AWS Systems Manager Parameter Store as a secure string. Configure automatic rotation with a rotation interval of 30 days.
B. Store the credentials in AWS Secrets Manager. Configure automatic rotation with a rotation interval of 30 days.
C. Store the credentials in a file in an Amazon S3 bucket. Deploy an AWS Lambda function to automatically rotate the credentials every 30 days.
D. Store the credentials in AWS Secrets Manager. Deploy an AWS Lambda function to automatically rotate the credentials every 30 days.

Show Suggested Answer

Suggested Answer: B 🗳️

by marcelodba at Nov. 27, 2022, 4:43 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

tttfakil

1 year ago

Selected Answer: B

https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html

upvoted 2 times

...

Christina666

1 year ago

Selected Answer: B

Secret manager has build-in feature of automatelly rotate password

upvoted 4 times

...

CVDON

1 year, 3 months ago

D because rds only works with Secret Manager

upvoted 1 times

...

CVDON

1 year, 3 months ago

Only Works With secret manager

upvoted 1 times

...

King_AWS_202

1 year, 3 months ago

Selected Answer: B

The answer is definitely B

upvoted 3 times

...

Gomer

1 year, 3 months ago

For what it's worth, Lambda is involved with rotation of secrets (suggesting option "D."), but I'm presuming Lambda is configured transparently in the background when you enable key rotation, therefore "B." seems to be a more straightforward answer. "Secrets Manager rotation uses an AWS Lambda function to update the secret and the database." "To rotate a secret, Secrets Manager calls a Lambda function according to the schedule you set up." https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotating-secrets.html

upvoted 1 times

...