AWS Certified Developer - Associate DVA-C02 — Topic 1 Question 270

Question

A company notices that credentials that the company uses to connect to an external software as a service (SaaS) vendor are stored in a configuration file as plaintext. The developer needs to secure the API credentials and enforce automatic credentials rotation on a quarterly basis. Which solution will meet these requirements MOST securely?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Store the credentials in AWS Secrets Manager and enable rotation. Configure the API to have Secrets Manager access. AWS Secrets Manager stores and automatically rotates secrets such as database credentials. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified Developer - Associate DVA-C02 — Question 270