AWS Certified Solutions Architect – Professional (SAP-C02) — Question 186

A solutions architect needs to improve an application that is hosted in the AWS Cloud. The application uses an Amazon Aurora MySQL DB instance that is experiencing overloaded connections. Most of the application’s operations insert records into the database. The application currently stores credentials in a text-based configuration file.

The solutions architect needs to implement a solution so that the application can handle the current connection load. The solution must keep the credentials secure and must provide the ability to rotate the credentials automatically on a regular basis.

Which solution will meet these requirements?

Answer options

• A. Deploy an Amazon RDS Proxy layer. In front of the DB instance. Store the connection credentials as a secret in AWS Secrets Manager.
• B. Deploy an Amazon RDS Proxy layer in front of the DB instance. Store the connection credentials in AWS Systems Manager Parameter Store
• C. Create an Aurora Replica. Store the connection credentials as a secret in AWS Secrets Manager
• D. Create an Aurora Replica. Store the connection credentials in AWS Systems Manager Parameter Store.

Correct answer: A

Explanation

The correct answer is A because deploying an Amazon RDS Proxy can help manage database connections more efficiently and storing credentials in AWS Secrets Manager ensures they are secure and can be rotated automatically. Option B does not provide the same level of security for credential rotation, while options C and D do not address the connection load issue effectively.