Answer-first summary for fast verification
Answer: AWS Secrets Manager
The correct answer is D: AWS Secrets Manager. AWS Secrets Manager is designed for managing and automatically rotating secrets, such as database passwords, without requiring code changes in the application. It supports random password generation during deployment (which meets the requirement for generating the database password) and offers built-in functionality for automatically rotating the password. This makes it the most operationally efficient solution for the given requirements.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
In an AWS CloudFormation deployment of a two-tier application with Amazon RDS, which solution enables random database password generation during deployment and automatic password rotation without application changes?
A
AWS Lambda function as a CloudFormation custom resource
B
AWS Systems Manager Parameter Store with SecureString
C
Cron daemon on the application host
D
AWS Secrets Manager
No comments yet.