AWS Certified Cloud Practitioner — Question 623

A company needs to securely store important credentials that an application uses to connect users to a database.

Which AWS service can meet this requirement with the MINIMAL amount of operational overhead?

Answer options

• A. AWS Key Management Service (AWS KMS)
• B. AWS Config
• C. AWS Secrets Manager
• D. Amazon GuardDuty

Correct answer: C

Explanation

AWS Secrets Manager is specifically designed to securely store, rotate, and retrieve database credentials and API keys with minimal operational effort. AWS KMS is used for managing encryption keys rather than storing secret values directly, while AWS Config is for resource compliance tracking and Amazon GuardDuty is for threat detection.