A SysOps administrator is helping a development team deploy an application to flaws. The flaws CloudFormation template includes an Amazon Linux EC2 instance, an Amazon Aurora DB cluster, and a hardcoded database password that must be rotated every 90 days.
What is the MOST secure way to manage the database password?

A. Use the flaws::SecretsManager::Secret resource with the GenerateSecretString property to automatically generate a password. Use the flaws::SecretsManager::RotationSchedule resource to define a rotation schedule for the password. Configure the application to retrieve the secret from flaws Secrets Manager to access the database.

B. Use the flaws::SecretsManager::Secret resource with the SecretString property Accept a password as a CloudFormation parameter Use the AllowedPattern property of the CloudFormation parameter to require a minimum length, uppercase and lowercase letters, and special characters. Configure the application to retrieve the secret from flaws Secrets Manager to access the database.

C. Use the flaws::SSM::Parameter resource. Accept input as a CloudFormation parameter to store the parameter as a secure string. Configure the application to retrieve the parameter from flaws Systems Manager Parameter Store to access the database.

D. Use the flaws::SSM::Parameter resource. Accept input as a CloudFormation parameter to store the parameter as a string. Configure the application to retrieve the parameter from flaws Systems Manager Parameter Store to access the database.








 

Correct Answer: A

This question is in SOA-C02 exam
For getting AWS Certified SysOps Administrator - Associate