AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 61

Question

A company is developing a two-tier web application on AWS. The company's developers have deployed the application on an Amazon EC2 instance that connects directly to a backend Amazon RDS database. The company must not hardcode database credentials in the application. The company must also implement a solution to automatically rotate the database credentials on a regular basis. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Store the database credentials as a secret in AWS Secrets Manager. Turn on automatic rotation for the secret. Attach the required permission to the EC2 role to grant access to the secret. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Secrets Manager stores and automatically rotates secrets such as database credentials.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 61