Examice

Exam DVA-C02 All QuestionsBrowse all questions from this exam

Question 402

A company has an ecommerce web application that uses an on-premises MySQL database as a data store. The company migrates the on-premises MySQL database to Amazon RDS for MySQL.

A developer needs to configure the application's access to the RDS for MySQL database. The developer's solution must not use long term credentials.

Which solution will meet these requirements?

Enable IAM database authentication on the RDS for MySQL DB instance. Create an IAM role that has the minimum required permissions. Assign the role to the application.

Store the MySQL credentials as secrets in AWS Secrets Manager. Create an IAM role that has the minimum required permissions to retrieve the secrets. Assign the role to the application.

Configure the MySQL credentials as environment variables that are available at runtime for the application.

Store the MySQL credentials as SecureString parameters in AWS Systems Manager Parameter Store. Create an IAM role that has the minimum required permissions to retrieve the parameters. Assign the role to the application.

Correct Answer: A

To meet the requirement of not using long-term credentials, enabling IAM database authentication on the Amazon RDS for MySQL DB instance is a suitable solution. The IAM role with the minimum necessary permissions can be created and assigned to the application, allowing secure access without hardcoding credentials or using long-term stored passwords. This solution leverages temporary, automatically rotated IAM credentials for secure database access.

Discussion

ahadh7621Option: B

B. "The developer's solution must not use long term credentials" implies that the credentials will be rotated, which SecretsManager supports.