ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Solutions Architect - Associate SAA-C03 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C03 exam
Go to Exam

Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 339 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C03
Question #: 339
Topic #: 1
[All AWS Certified Solutions Architect - Associate SAA-C03 Questions]

A company has a custom application with embedded credentials that retrieves information from an Amazon RDS MySQL DB instance. Management says the application must be made more secure with the least amount of programming effort.

What should a solutions architect do to meet these requirements?

  • A. Use AWS Key Management Service (AWS KMS) to create keys. Configure the application to load the database credentials from AWS KMS. Enable automatic key rotation.
  • B. Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Secrets Manager. Configure the application to load the database credentials from Secrets Manager. Create an AWS Lambda function that rotates the credentials in Secret Manager.
  • C. Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Secrets Manager. Configure the application to load the database credentials from Secrets Manager. Set up a credentials rotation schedule for the application user in the RDS for MySQL database using Secrets Manager.
  • D. Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Systems Manager Parameter Store. Configure the application to load the database credentials from Parameter Store. Set up a credentials rotation schedule for the application user in the RDS for MySQL database using Parameter Store.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by Bhawesh at Feb. 17, 2023, 8:53 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
cloudbusting
Highly Voted 2 years, 4 months ago
Parameter Store does not provide automatic credential rotation.
upvoted 16 times
...
Bhawesh
Highly Voted 2 years, 4 months ago
Selected Answer: C
C. Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Secrets Manager. Configure the application to load the database credentials from Secrets Manager. Set up a credentials rotation schedule for the application user in the RDS for MySQL database using Secrets Manager. https://www.examtopics.com/discussions/amazon/view/46483-exam-aws-certified-solutions-architect-associate-saa-c02/
upvoted 12 times
...
JA2018
Most Recent 7 months, 1 week ago
Selected Answer: C
Management says the application must be made more secure with the least amount of programming effort. IMHO, this will rule out Lambda for this STEM.
upvoted 1 times
...
Gape4
1 year ago
Selected Answer: C
credentials from Secrets Manager...
upvoted 2 times
...
d401c0d
1 year, 3 months ago
question is asking for "more secure with the least amount of programming effort." = Secrets Manager + Secretes Manager's built in rotation schedule instead of Lambda.
upvoted 2 times
...
awsgeek75
1 year, 5 months ago
Selected Answer: C
A KMS is for encryption keys specifically so this is a long way of doing the credentials storage B is too much work for rotation C exactly what secrets manager is designed for D You can do that if C wasn't an option
upvoted 2 times
...
Guru4Cloud
1 year, 9 months ago
Selected Answer: C
Store the RDS credentials in Secrets Manager Configure the application to retrieve the credentials from Secrets Manager Use Secrets Manager's built-in rotation to rotate the RDS credentials automatically
upvoted 2 times
...
Hades2231
1 year, 10 months ago
Selected Answer: C
Secrets Manager can handle the rotation, so no need for Lambda to rotate the keys.
upvoted 2 times
...
chen0305_099
1 year, 10 months ago
WHY NOT B ?
upvoted 1 times
...
StacyY
1 year, 10 months ago
B, we need lambda for password rotation, confirmed!
upvoted 2 times
Nikki013
1 year, 10 months ago
It is not needed for certain types RDS, including MySQL as Secrets Manager has built-in rotation capabilities for it: https://aws.amazon.com/blogs/security/rotate-amazon-rds-database-credentials-automatically-with-aws-secrets-manager/
upvoted 3 times
...
...
Abrar2022
2 years ago
Selected Answer: C
If you need your DB to store credentials then use AWS Secret Manager. System Manager Paramater Store is for CloudFormation (no rotation)
upvoted 2 times
...
AlessandraSAA
2 years, 3 months ago
why it's not A?
upvoted 4 times
MssP
2 years, 3 months ago
It is asking for credentials, not for encryption keys.
upvoted 7 times
PoisonBlack
2 years, 1 month ago
So credentials rotation is secrets manager and key rotation is KMS?
upvoted 3 times
...
...
...
bdp123
2 years, 4 months ago
Selected Answer: C
https://aws.amazon.com/blogs/security/rotate-amazon-rds-database-credentials-automatically-with-aws-secrets-manager/
upvoted 2 times
...
LuckyAro
2 years, 4 months ago
Selected Answer: C
C is a valid solution for securing the custom application with the least amount of programming effort. It involves creating credentials on the RDS for MySQL database for the application user and storing them in AWS Secrets Manager. The application can then be configured to load the database credentials from Secrets Manager. Additionally, the solution includes setting up a credentials rotation schedule for the application user in the RDS for MySQL database using Secrets Manager, which will automatically rotate the credentials at a specified interval without requiring any programming effort.
upvoted 4 times
...
bdp123
2 years, 4 months ago
Selected Answer: C
https://docs.aws.amazon.com/secretsmanager/latest/userguide/create_database_secret.html
upvoted 3 times
...
jennyka76
2 years, 4 months ago
Answer - C https://ws.amazon.com/blogs/security/rotate-amazon-rds-database-credentials-automatically-with-aws-secrets-manager/
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel