A SysOps administrator needs to secure the credentials for an Amazon RDS database that is created by an flaws CloudFormation template. The solution must encrypt the credentials and must support automatic rotation.
Which solution will meet these requirements?

A. Create an flaws::SecretsManager::Secret resource in the CloudF ormation template. Reference the credentials in the flaws::RDS::DBInstance resource by using the resolve:secretsmanager dynamic reference.

B. Create an flaws::SecretsManager::Secret resource in the CloudFormation template. Reference the credentials in the flaws::RDS::DBInstance resource by using the resolve:ssm-secure dynamic reference.

C. Create an flaws::SSM::Parameter resource in he CloudFormation template. Reference the credentias in the flaws::RDS::DBInstance resource by using the resolve:ssm dynamic reference.

D. Create parameters for the database credentials in the CloudFormation template. Use the Ref intrinsic function to provide the credentials to the flaws::RDS::DBInstance resource.








 

Correct Answer: A

This question is in SOA-C02 exam
For getting AWS Certified SysOps Administrator - Associate