Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: force70

Amazon Web Services AWS Certified Developer - Associate DVA-C02 Question # 101 Topic 11 Discussion

Amazon Web Services AWS Certified Developer - Associate DVA-C02 Question # 101 Topic 11 Discussion

DVA-C02 Exam Topic 11 Question 101 Discussion:
Question #: 101
Topic #: 11

A company runs a critical application on AWS. The application uses credentials to access an Amazon RDS database.

As part of a risk assessment to analyze security vulnerabilities, the company found that database credentials are not frequently rotated. A developer needs to implement a solution that securely stores and rotates the credentials. The solution must not expose the credentials to anyone who should not have access to the credentials.

Which solution will meet these requirements?


A.

Configure AWS Secrets Manager to store the database credentials. Schedule managed rotation for Secrets Manager secrets.


B.

Configure the Systems Manager parameters with an AWS KMS AWS managed key to encrypt the database credentials at rest. Create an AWS Lambda function to rotate the KMS key. Set up an Amazon EventBridge rule to invoke the Lambda function on a schedule.


C.

Configure an Amazon S3 bucket with S3 Bucket Keys for server-side encryption with AWS KMS keys (SSE-KMS) to store the database credentials.


D.

Configure the Systems Manager parameters with an AWS KMS customer managed key to encrypt the database credentials at rest. Create an AWS Lambda function to periodically rotate the KMS key. Use a cron expression to invoke the Lambda function on a schedule.


Get Premium DVA-C02 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.