AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 86

Question

A company has several web servers that need to frequently access a common Amazon RDS MySQL Multi-AZ DB instance. The company wants a secure method for the web servers to connect to the database while meeting a security requirement to rotate user credentials frequently. Which solution meets these requirements?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Store the database user credentials in AWS Secrets Manager. Grant the necessary IAM permissions to allow the web servers to access AWS Secrets Manager. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS Secrets Manager stores and automatically rotates secrets such as database credentials. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 86