A company will run Amazon EC2 instances that connect to an Amazon Aurora DB cluster. The infrastructure is deployed with an AWS CloudFormation template. The company wants the EC2 instances to authenticate to the database securely without maintaining static database credentials. Which solution meets these requirements with the LEAST operational effort?
Choose an answer
Tap an option to check your answer.
Correct answer: Configure the DB cluster to use IAM database authentication. Create a database user to use with IAM authentication. Associate a role with the EC2 instances to allow applications on the instances to access the database..
Why this is the answer
The correct solution leverages IAM database authentication, which allows EC2 instances to authenticate to Aurora using IAM roles instead of static credentials. By associating an IAM role with the EC2 instances, applications running on those instances can assume the role and gain temporary credentials to access the database, eliminating the need to manage usernames