Ultimate access to all questions.
Upgrade Now 🚀
Sign in to unlock AI tutor
How can a company securely manage database credentials for AWS resources like RDS, DocumentDB, and Aurora, ensuring encryption at rest and regular rotation as per security policy?
A
Using IAM for token-based access with centralized user token generation.
B
Utilizing AWS Systems Manager Parameter Store with SecureString type and automatic rotation.
C
Encrypting credentials in an S3 bucket with blocked public access and automatic key rotation via S3 server-side encryption.
D
Employing AWS Lambda and SecretsManagerRotationTemplate for creating and rotating database credential secrets in Secrets Manager.
