AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 994

Question

A company hosts a multi-tier web application that uses an Amazon Aurora MySQL DB cluster for storage. The application tier is hosted on Amazon EC2 instances. The company's IT security guidelines mandate that the database credentials be encrypted and rotated every 14 days. What should a solutions architect do to meet this requirement with the LEAST operational effort?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Create a new AWS Key Management Service (AWS KMS) encryption key. Use AWS Secrets Manager to create a new secret that uses the KMS key with the appropriate credentials. Associate the secret with the Aurora DB cluster.... Amazon Aurora is a high-performance managed relational database with built-in replication and failover. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest. AWS Secrets Manager stores and automatically rotates secrets such as database credentials.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 994