ExpertMedium1 markMultiple Choice
AWS SAA-C03 · Question 17 · Domain 1.3: Data Security
A company has an application that connects to an Amazon RDS database. The company wants to store the database credentials securely and automatically rotate them every 30 days without modifying the application code. Which TWO AWS services can be used together to achieve this? (Select TWO.)
A company has an application that connects to an Amazon RDS database. The company wants to store the database credentials securely and automatically rotate them every 30 days without modifying the application code. Which TWO AWS services can be used together to achieve this? (Select TWO.)
Answer options:
A.
AWS Secrets Manager
B.
AWS Systems Manager Parameter Store
C.
AWS KMS
D.
AWS Lambda
E.
Amazon Macie
How to approach this question
Identify the service that supports automatic rotation (Secrets Manager) and the compute service it uses to execute the rotation (Lambda).
Full Answer
A,D
AWS Secrets Manager helps you protect secrets needed to access your applications, services, and IT resources. It natively supports automatic rotation of credentials for RDS. To perform the rotation, Secrets Manager invokes an AWS Lambda function.
Common mistakes
Choosing Parameter Store, which does not support automatic rotation natively.
Practice the full AWS SAA-C03 Practice Exam 1
65 questions · hints · full answers · grading
More questions from this exam
Q01A company has multiple AWS accounts in an AWS Organizations organization. The security team wants...MediumQ02A solutions architect is designing an application that will run on Amazon EC2 instances. The appl...EasyQ03A company wants to implement a federated identity solution for its employees to access the AWS Ma...MediumQ04A mobile application needs to access Amazon DynamoDB directly to read user-specific data. The app...HardQ05A company is hosting a web application on Amazon EC2 instances. The application connects to an Am...Medium