ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Developer Associate All Questions

View all questions & answers for the AWS Certified Developer Associate exam
Go to Exam

Exam AWS Certified Developer Associate topic 1 question 90 discussion

Exam question from Amazon's AWS Certified Developer Associate
Question #: 90
Topic #: 1
[All AWS Certified Developer Associate Questions]

An application running on Amazon EC2 opens connections to an Amazon RDS SQL Server database. The developer does not want to store the user name and password for the database in the code. The developer would also like to automatically rotate the credentials.
What is the MOST secure way to store and access the database credentials?

  • A. Create an IAM role that has permissions to access the database. Attach the role to the EC2 instance.
  • B. Use AWS Secrets Manager to store the credentials. Retrieve the credentials from Secrets Manager as needed.
  • C. Store the credentials in an encrypted text file in an Amazon S3 bucket. Configure the EC2 instance's user data to download the credentials from Amazon S3 as the instance boots.
  • D. Store the user name and password credentials directly in the source code. No further action is needed because the source code is stored in a private repository.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by quanlh at Aug. 18, 2020, 9:29 a.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
RicardoD
Highly Voted 3 years, 5 months ago
B is the answer Store DB credentials at secrets manager
upvoted 16 times
...
quanlh
Highly Voted 3 years, 7 months ago
B is correct
upvoted 5 times
...
sumanshu
Most Recent 4 months, 1 week ago
Selected Answer: B
B) correct - Secrets Manager provides a built-in ability to automatically rotate credentials, ensuring that they are updated regularly without the need for manual intervention.
upvoted 1 times
...
Baalhammun
1 year ago
Selected Answer: B
RDS is integrated with Secrets Manager, also it offers automatic key rotation, B is the correct answer
upvoted 1 times
...
rcaliandro
1 year, 10 months ago
Selected Answer: B
"Rotate Credentials" => the best and secure option to store creadentials is by using AWS Secrets Manager. The right answer is B
upvoted 1 times
...
sichilam
2 years, 3 months ago
B is the answer
upvoted 1 times
...
Dirisme
2 years, 3 months ago
The keyword is rotate hints at secrets manager
upvoted 1 times
...
haazybanj
2 years, 6 months ago
Selected Answer: B
B is the answer
upvoted 1 times
...
LaXuanLinh
2 years, 8 months ago
Selected Answer: B
A is not correct because SQL Server does not support IAM credentials The question asks specifically about storing username and password and rotation, so Secret manager is the way to go
upvoted 5 times
...
mike_0
2 years, 11 months ago
B- key rotation
upvoted 2 times
...
cloudbusting
2 years, 11 months ago
it talks about credentials so B
upvoted 1 times
...
SpeedRunner
3 years ago
Selected Answer: A
https://aws.amazon.com/premiumsupport/knowledge-center/users-connect-rds-iam/ We can use IAM to connect to Amazon RDS SQL. Moreover the question has been changed more accurately by asking "MOST secure way". Read the post above, IAM is the more secure than any other methods. ACloud guru explained that IAM role's token is remaining only temporarily so we can say the credentials will be automatically rotated.
upvoted 1 times
sichilam
2 years, 3 months ago
Whenever you want to access data in DB, you have to login. So you need UserID/Pwd to log into database. You can access the database from your home laptop too if you setup access control list (whitelist). All you have to have is userid/pwd
upvoted 1 times
...
robbyboss
2 years, 7 months ago
MS SQL is not supported for IAM (only MySQL and PostgreSQL)
upvoted 3 times
...
...
JP_PA
3 years, 2 months ago
Selected Answer: B
ANS: B
upvoted 2 times
...
Sayto
3 years, 5 months ago
Remember that sql servers don't support IAM database authentication.
upvoted 2 times
Gomer
2 years, 9 months ago
Possibly true for MS SQL Server. However, If Aurora is used to emulate SQL, it can be accessed by a role. I didn't think this was the case either until I researched it. Amazon has enhanced Aurora to utilize roles/token access. I think answer is still B. though. Selling point of Secret's Manager is the automatic key rotation.
upvoted 1 times
...
...
Qins
3 years, 5 months ago
B is correct
upvoted 1 times
...
Ash111
3 years, 5 months ago
B. Use AWS Secrets Manager to store the credentials. Retrieve the credentials from Secrets Manager as needed.
upvoted 1 times
...
Chinta
3 years, 6 months ago
B is correct
upvoted 1 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago