Question 1

A company is migrating a legacy application to AWS. The application hardcodes database credentials in its configuration files. The security team mandates that credentials must be encrypted at rest, rotated automatically every 30 days, and retrieved dynamically by the application at runtime.

Which AWS service should be used to meet these requirements?

Accepted Answer

Look for the keyword 'rotated automatically'. Secrets Manager has native rotation capabilities.

Question 2

What mistakes do candidates make on this AWS SAA-C03 question?

Accepted Answer

Choosing Parameter Store. While Parameter Store is cheaper, Secrets Manager is required for native automatic rotation.

How to approach this question

Full Answer

Common mistakes

Practice the full AWS SAA-C03 Practice Exam 4

More questions from this exam