Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: force70

Amazon Web Services AWS Certified Solutions Architect - Associate (SAA-C03) SAA-C03 Question # 70 Topic 8 Discussion

Amazon Web Services AWS Certified Solutions Architect - Associate (SAA-C03) SAA-C03 Question # 70 Topic 8 Discussion

SAA-C03 Exam Topic 8 Question 70 Discussion:
Question #: 70
Topic #: 8

A solutions architect manages a containerized application that is deployed on Amazon ECS. The application stores data in an Amazon DynamoDB database. The solutions architect must implement a solution to rotate the database credentials every 30 days.

Which solution will meet these requirements with the LEAST development effort?


A.

Store the credentials as an ECS environment variable. Enable encryption by using AWS KMS with scheduled rotation configured.


B.

Store the credentials as a secure string parameter in AWS Systems Manager Parameter Store. Configure automated rotation of the parameter on a schedule.


C.

Store the credentials as a secret in AWS Secrets Manager. Configure automated rotation of the secret on a schedule.


D.

Store the ciphertext as an application environment variable. Implement client-side encryption and scheduled rotation by using code.


Get Premium SAA-C03 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.