AWS Certified Cloud Practitioner — Question 792

A company wants to securely store Amazon RDS database credentials and automatically rotate user passwords periodically.

Which AWS service or capability will meet these requirements?

Answer options

• A. Amazon S3
• B. AWS Systems Manager Parameter Store
• C. AWS Secrets Manager
• D. AWS CloudTrail

Correct answer: C

Explanation

AWS Secrets Manager is designed to protect database credentials and API keys, offering native support for automatic rotation of Amazon RDS passwords. While AWS Systems Manager Parameter Store can store sensitive data, it does not provide built-in, automated credential rotation. Amazon S3 is an object storage service and AWS CloudTrail is an auditing tool, making neither of them suitable for managing and rotating secret credentials.