Answer-first summary for fast verification
Answer: Utilize AWS Secrets Manager with a configured 30-day rotation for credentials.
The correct answer is B. AWS Secrets Manager is specifically designed to manage secrets, such as database credentials, and supports automatic rotation of those secrets according to a predefined schedule. This makes it the most secure and automated solution for rotating database passwords every 30 days, ensuring compliance with security policies. Other options either do not support automatic rotation or do not provide an equally secure and managed approach.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
A company uses AWS Lambda functions to access an Amazon RDS database. The security policy mandates a database password change every 30 days. Identify the most secure method to automate this requirement.
A
Update Lambda environment variables with new credentials and redeploy every 30 days.
B
Utilize AWS Secrets Manager with a configured 30-day rotation for credentials.
C
Use AWS Systems Manager Parameter Store with a 30-day rotation schedule for secure strings.
D
Place credentials in an encrypted Amazon S3 bucket with a 30-day key rotation policy.
No comments yet.