AWS Certified Developer – Associate (DVA-C02) — Question 190

A company is migrating its PostgreSQL database into the AWS Cloud. The company wants to use a database that will secure and regularly rotate database credentials. The company wants a solution that does not require additional programming overhead.

Which solution will meet these requirements?

Answer options

• A. Use Amazon Aurora PostgreSQL for the database. Store the database credentials in AWS Systems Manager Parameter Store. Turn on rotation.
• B. Use Amazon Aurora PostgreSQL for the database. Store the database credentials in AWS Secrets Manager. Turn on rotation.
• C. Use Amazon DynamoDB for the database. Store the database credentials in AWS Systems Manager Parameter Store. Turn on rotation.
• D. Use Amazon DynamoDB for the database. Store the database credentials in AWS Secrets Manager. Turn on rotation.

Correct answer: B

Explanation

Option B is correct because AWS Secrets Manager is specifically designed for securely storing and managing sensitive information like database credentials, and it offers built-in credential rotation without requiring additional coding. Options A and C use AWS Systems Manager Parameter Store, which does not provide automatic credential rotation, while options C and D use Amazon DynamoDB, which does not meet the requirement of migrating a PostgreSQL database.