AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 255

Question

A SysOps administrator is helping a development team deploy an application to AWS. The AWS CloudFormation template includes an Amazon Linux EC2 instance, an Amazon Aurora DB cluster, and a hardcoded database password that must be rotated every 90 days. What is the MOST secure way to manage the database password?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Use the AWS::SecretsManager::Secret resource with the GenerateSecretString property to automatically generate a password. Use the AWS::SecretsManager::RotationSchedule resource to define a rotation schedule for the pa... AWS Secrets Manager stores and automatically rotates secrets such as database credentials. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 255