
Ultimate access to all questions.
As a developer responsible for maintaining workloads on AWS, you have embedded RDS database connection strings directly within each of the web servers hosting your applications. Following a recent security audit failure, you are seeking a more secure method for storing these secrets and an automated way to rotate the database credentials regularly for better security.
Which AWS service should you utilize to meet these requirements?
A
SSM Parameter Store
B
KMS
C
Secrets Manager
D
Systems Manager
Explanation:
AWS Secrets Manager enables you to easily rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle. Users and applications retrieve secrets with a call to Secrets Manager APIs, eliminating the need to hardcode sensitive information in plain text. Secrets Manager offers secret rotation with built-in integration for Amazon RDS, Amazon Redshift, and Amazon DocumentDB.