A company uses Amazon RDS for PostgreSQL. The company must implement password rotation for the databases. Which solution provides password rotation with the LEAST operational overhead?
Choose an answer
Tap an option to check your answer.
Correct answer: Store the password in AWS Secrets Manager. Enable automatic rotation on the secret..
Why this is the answer
AWS Secrets Manager is designed for managing and rotating secrets, including database credentials. It offers built-in, automatic rotation for various services, including Amazon RDS for PostgreSQL, with minimal configuration. This makes it the solution with the least operational overhead. Storing the password in AWS Systems Manager Parameter Store does not natively support automatic password rotation for databases, requiring a custom solution like an AWS Lambda function, which increases operational overhead. AWS Key Management Service (KMS) is for encrypting data and secrets, not for storing or rotating them directly. While Secrets Manager uses KMS for encryption, KMS itself doesn't provide the rotation functionality.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed