AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 11

Question

A company has an application that runs on Amazon EC2 instances and uses an Amazon Aurora database. The EC2 instances connect to the database by using user names and passwords that are stored locally in a file. The company wants to minimize the operational overhead of credential management. What should a solutions architect do to accomplish this goal?

Accepted Answer

Correct answer: A. Correct: A. Secrets Manager is built to store database credentials and rotate them automatically, with native Aurora/RDS integration — it removes the local file and the manual rotation work. B (Parameter Store) can hold secrets but has no built-in rotation; you'd build and run the rotation yourself. C and D just relocate a static credential file to S3 or EBS, with no rotation and more to manage.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 11