Examkin

Question

Difficulty: EasySecrets Management and Parameter Store

A developer is configuring a database connection for a new application. The database credentials must be rotated automatically every 15 days, and the developer wants to use native integration with Amazon RDS to rotate them without writing custom rotation code. Which AWS service should the developer use to store the credentials?

  1. AWS Secrets ManagerAnswer
  2. B
    AWS Systems Manager Parameter Store using a SecureString parameter type
  3. C
    Hardcoded database credentials stored directly within the application initialization code
  4. D
    AWS Key Management Service (AWS KMS) data keys stored in the application environment variables

Answer

AWS Secrets Manager
AWS Secrets Manager is designed for storing and managing secrets, offering built-in integration with Amazon RDS to automatically rotate database credentials without requiring custom code.

Step-by-Step Solution

1
Identify the requirement for automatic credential rotation every 15 days.
Automatic rotation is a native feature of AWS Secrets Manager but is not natively supported by Systems Manager Parameter Store.
Secrets Manager provides out-of-the-box rotation support for popular database services like Amazon RDS.
2
Evaluate the requirement for native RDS integration without writing custom rotation code.
AWS Secrets Manager provides built-in rotation templates for RDS, whereas other services would require writing custom rotation logic.
Using native RDS integration simplifies the operational overhead of rotation.

Key Concept

AWS Secrets Manager vs Systems Manager Parameter Store features, specifically automatic rotation and database integration.
Estimated Time:45s
Rate this question

Topics

Secrets Management and Parameter Store

More questions from this topic