SAA-C03 Q380 · Security

Question

A company uses Amazon RDS for PostgreSQL databases for its data tier. The company must implement password rotation for the databases. Which solution meets this requirement with the LEAST operational overhead?

Accepted Answer

**Answer A: AWS Secrets Manager with automatic rotation** is correct because:

1. **Built-in rotation for RDS**: Secrets Manager has **native integration with Amazon RDS** (including PostgreSQL). It provides pre-built Lambda rotation functions specifically designed for RDS databases — you don't need to write any custom code.

2. **Automatic rotation**: You simply enable rotation, choose a rotation schedule (e.g., every 30 days), and Secrets Manager handles everything: generating a new password, updating the RDS database credential, and storing the new secret value.

3. **Least operational overhead**: The entire rotation lifecycle is managed by AWS. Secrets Manager automatically provisions the required Lambda function, configures it with the correct logic for single-user or multi-user rotat

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips