AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 312

Question

A SysOps administrator needs to secure the credentials for an Amazon RDS database that is created by an AWS CloudFormation template. The solution must encrypt the credentials and must support automatic rotation. Which solution will meet these requirements?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Create an AWS::SecretsManager::Secret resource in the CloudF ormation template. Reference the credentials in the AWS::RDS::DBInstance resource by using the resolve:secretsmanager dynamic reference. Amazon RDS is a managed relational database that handles patching, backups and failover.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 312