A company has an ecommerce web application that uses an on-premises MySQL database as a data store. The company migrates the on-premises MySQL database to Amazon RDS for MySQL.
A developer needs to configure the application's access to the RDS for MySQL database. The developer's solution must not use long term credentials.
Which solution will meet these requirements?
To meet the requirement of not using long-term credentials, enabling IAM database authentication on the Amazon RDS for MySQL DB instance is a suitable solution. The IAM role with the minimum necessary permissions can be created and assigned to the application, allowing secure access without hardcoding credentials or using long-term stored passwords. This solution leverages temporary, automatically rotated IAM credentials for secure database access.
B. "The developer's solution must not use long term credentials" implies that the credentials will be rotated, which SecretsManager supports.