ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified SysOps Administrator - Associate All Questions

View all questions & answers for the AWS Certified SysOps Administrator - Associate exam
Go to Exam

Exam AWS Certified SysOps Administrator - Associate topic 1 question 360 discussion

Exam question from Amazon's AWS Certified SysOps Administrator - Associate
Question #: 360
Topic #: 1
[All AWS Certified SysOps Administrator - Associate Questions]

A manufacturing company uses an Amazon RDS DB instance to store inventory of all stock items. The company maintains several AWS Lambda functions that interact with the database to add, update, and delete items. The Lambda functions use hardcoded credentials to connect to the database.

A SysOps administrator must ensure that the database credentials are never stored in plaintext and that the password is rotated every 30 days.

Which solution will meet these requirements in the MOST operationally efficient manner?

  • A. Store the database password as an environment variable for each Lambda function. Create a new Lambda function that is named PasswordRotate. Use Amazon EventBridge to schedule the PasswordRotate function every 30 days to change the database password and update the environment variable for each Lambda function.
  • B. Use AWS Key Management Service (AWS KMS) to encrypt the database password and to store the encrypted password as an environment variable for each Lambda function. Grant each Lambda function access to the KMS key so that the database password can be decrypted when required. Create a new Lambda function that is named PasswordRotate to change the password every 30 days.
  • C. Use AWS Secrets Manager to store credentials for the database. Create a Secrets Manager secret, and select the database so that Secrets Manager will use a Lambda function to update the database password automatically. Specify an automatic rotation schedule of 30 days. Update each Lambda function to access the database password from Secrets Manager.
  • D. Use AWS Systems Manager Parameter Store to create a secure string to store credentials for the database. Create a new Lambda function called PasswordRotate. Use Amazon EventBridge to schedule the PasswordRotate function every 30 days to change the database password and to update the secret within Parameter Store. Update each Lambda function to access the database password from Parameter Store.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by kevino81 at June 29, 2023, 3:45 a.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
kevino81
Highly Voted 1 year, 4 months ago
Selected Answer: C
C Secret manager = password
upvoted 5 times
...
joshnort
Most Recent 6 months, 3 weeks ago
Selected Answer: C
AWS Secrets Manager is designed for exactly this use case, providing a secure and centralized location to store and rotate secrets such as database credentials. It can automatically rotate the password, and Lambda functions can easily retrieve the password from Secrets Manager. https://docs.aws.amazon.com/secretsmanager/latest/userguide/managing-secrets.html
upvoted 1 times
...
trvtrinh
1 year, 3 months ago
With this solution, AWS Secrets Manager will handle the rotation of the database password automatically every 30 days, ensuring that the credentials are never stored in plaintext and are regularly updated. The Lambda functions can securely access the database password from Secrets Manager, eliminating the need for hardcoded credentials in the code. Using Secrets Manager to manage the credentials and rotation of the database password is a best practice for securely handling sensitive information in AWS environments.
upvoted 2 times
trvtrinh
1 year, 3 months ago
C is correct
upvoted 2 times
...
...
[Removed]
1 year, 3 months ago
C. Use AWS Secrets Manager to store credentials for the database. Create a Secrets Manager secret, and select the database so that Secrets Manager will use a Lambda function to update the database password automatically. Specify an automatic rotation schedule of 30 days. Update each Lambda function to access the database password from Secrets Manager.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago