AWS Certified Machine Learning Engineer – Associate (MLA-C01) — Question 54

A company has an application that uses different APIs to generate embeddings for input text. The company needs to implement a solution to automatically rotate the API tokens every 3 months.
Which solution will meet this requirement?

Answer options

• A. Store the tokens in AWS Secrets Manager. Create an AWS Lambda function to perform the rotation.
• B. Store the tokens in AWS Systems Manager Parameter Store. Create an AWS Lambda function to perform the rotation.
• C. Store the tokens in AWS Key Management Service (AWS KMS). Use an AWS managed key to perform the rotation.
• D. Store the tokens in AWS Key Management Service (AWS KMS). Use an AWS owned key to perform the rotation.

Correct answer: A

Explanation

The correct answer is A because AWS Secrets Manager is specifically designed for managing secrets such as API tokens and provides built-in functionality for automatic rotation. Option B uses AWS Systems Manager Parameter Store, which does not have the same level of secret management features. Options C and D involve AWS KMS, which is focused on key management rather than secret storage and rotation.