AWS Certified Solutions Architect - Associate
Get started today
Ultimate access to all questions.
Deep dive into the quiz with AI chat providers.
We prepare a focused prompt with your quiz and certificate details so each AI can offer a more tailored, in-depth explanation.
A company runs its databases on Amazon RDS for PostgreSQL. The company wants a secure solution to manage the master user password by rotating the password every 30 days.
Which solution will meet these requirements with the LEAST operational overhead?
Other
Community
UAnonymous
A
Use Amazon EventBridge to schedule a custom AWS Lambda function to rotate the password every 30 days.
B
Use the modify-db-instance command in the AWS CLI to change the password.
C
Integrate AWS Secrets Manager with Amazon RDS for PostgreSQL to automate password rotation.
D
Integrate AWS Systems Manager Parameter Store with Amazon RDS for PostgreSQL to automate password rotation.
Explanation:
Explanation
Correct Answer: C - Integrate AWS Secrets Manager with Amazon RDS for PostgreSQL to automate password rotation.
AWS Secrets Manager is specifically designed for managing and rotating secrets like database passwords. It provides:
- Automatic rotation - Can be configured to rotate secrets on a schedule (e.g., every 30 days)
- Built-in RDS integration - Has native support for rotating RDS database passwords
- Least operational overhead - Requires minimal setup and maintenance compared to custom solutions
- Security best practices - Automatically updates the password in both RDS and any applications using the secret
Why other options are not optimal:
- A: While this works, it requires custom Lambda function development, EventBridge rule setup, and ongoing maintenance - more operational overhead.
- B: Manual CLI commands require manual intervention every 30 days, creating operational overhead and potential for human error.
- D: AWS Systems Manager Parameter Store can store secrets but doesn't have built-in automatic rotation capabilities for RDS passwords like Secrets Manager does.
Key AWS Services:
- AWS Secrets Manager: Managed service for secrets with automatic rotation
- Amazon RDS: Relational Database Service
- PostgreSQL: Database engine
Best Practice: Always use managed services like Secrets Manager for secret rotation to minimize operational overhead and ensure security compliance.
Comments
Loading comments...