A Lambda function must connect to an Amazon RDS for MySQL database. Credentials need to be encrypted and the database password should rotate automatically. Which solution satisfies these requirements?
Choose an answer
Tap an option to check your answer.
Correct answer: Store the DB credentials in AWS Secrets Manager and enable managed rotation for the secret..
Why this is the answer
Storing database credentials in AWS Secrets Manager and enabling managed rotation is the correct solution. Secrets Manager is designed for securely storing and automatically rotating sensitive data like database credentials, API keys, and other secrets. It integrates directly with Amazon RDS for automatic rotation, fulfilling both encryption and rotation requirements. Storing credentials in Lambda environment variables is insecure and does not support automatic rotation. AWS Systems Manager Parameter Store SecureString can encrypt credentials but lacks built-in managed rotation specifically for database credentials, requiring custom solutions. The X-Amz-Security-Token is a temporary security credential used for authentication with AWS services, not for storing long-term database credentials.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed