DVA-C02 Question 208
Single answerYou are developing a serverless application that runs on AWS Lambda and needs to access a database. The database credentials must be securely stored and rotated automatically to enhance security. Which AWS service should you use to achieve this?
- A
AWS Secrets Manager
- B
Amazon S3
- C
AWS Systems Manager Parameter Store
- D
AWS Key Management Service (KMS)
Show answer and explanation
Correct answer: A
Explanation
AWS Secrets Manager is the appropriate service for securely storing and automatically rotating secrets such as database credentials. While AWS Systems Manager Parameter Store can also securely store secrets, it does not support automatic rotation, which is required in this scenario. Other options like Amazon S3 and AWS KMS are not designed for secrets management.
- A. Correct.
AWS Secrets Manager is designed specifically for securely storing, managing, and automatically rotating secrets such as database credentials, making it the ideal service for this use case.
- B. Incorrect.
Amazon S3 is a storage service and is not designed for securely managing secrets or credentials.
- C. Incorrect.
AWS Systems Manager Parameter Store can store parameters securely, but it does not provide automatic rotation of secrets, which is a key requirement in this scenario.
- D. Incorrect.
AWS Key Management Service (KMS) is used for managing encryption keys, not for storing or rotating secrets like database credentials.