Ultimate access to all questions.
A security engineer is developing a Java application hosted on Amazon EC2 that interacts with an Amazon RDS database using a username and password for authentication. What are two effective methods to safeguard these credentials and ensure minimal disruption during credential rotation?
Explanation:
The correct answers are C and E. AWS Secrets Manager is designed for managing and rotating credentials, making it a suitable choice for minimizing downtime during credential rotation. Automatic rotation of credentials (option C) eliminates the need for manual updates and reduces operational overhead. Additionally, configuring the Java application to handle connection failures and fetch updated credentials from AWS Secrets Manager (option E) ensures that the application can continue to function seamlessly even when credentials are rotated. AWS Systems Manager Parameter Store, while useful for storing credentials securely, does not support automatic rotation of credentials (excluding options B and D). Option A is less efficient for dynamic credential management compared to the automatic features provided by AWS Secrets Manager.