AWS Certified Cloud Practitioner (CLF-C02) — Question 619

A company wants to securely store Amazon RDS database credentials and automatically rotate user passwords periodically.

Which AWS service or capability will meet these requirements?

Answer options

Correct answer: C

Explanation

AWS Secrets Manager is designed specifically to protect secrets needed to access applications, services, and IT resources, offering built-in integration to rotate credentials automatically for Amazon RDS. AWS Systems Manager Parameter Store can store secrets but lacks native, automated rotation capabilities for databases. Amazon S3 is an object storage service, and AWS CloudTrail is used for auditing and logging API activity, making neither suitable for secret management and rotation.