QuestionQ33

Content Domain 2: Security and Compliance

A company wants to securely store Amazon RDS database credentials and automatically rotate user passwords periodically.

Which AWS service or capability will meet these requirements?

  • A Amazon S3
  • B AWS Systems Manager Parameter Store
  • C AWS Secrets Manager
  • D AWS CloudTrail
Explanation

AWS Secrets Manager is purpose-built to securely store credentials such as database passwords and can automatically rotate them on a schedule, with native integration for Amazon RDS. Parameter Store can hold secrets but lacks Secrets Manager's built-in automatic rotation workflow for RDS, and S3 and CloudTrail are not credential management services.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!