SAA-C03 Q448 · Security

Question

A company is building an application on AWS that connects to an Amazon RDS database. The company wants to manage the application configuration and to securely store and retrieve credentials for the database and other services. Which solution will meet these requirements with the LEAST administrative overhead?

Accepted Answer

**Answer A: AWS AppConfig + AWS Secrets Manager** perfectly addresses both requirements with the least administrative overhead:

1. **Application Configuration Management → AWS AppConfig**
   - AppConfig is a capability of AWS Systems Manager specifically designed for managing application configuration.
   - It supports feature flags, operational tuning, and configuration deployment with built-in validation and rollback.
   - It provides controlled deployments of configuration changes (gradual rollout, automatic rollback on errors).

2. **Secure Credential Storage & Retrieval → AWS Secrets Manager**
   - Purpose-built for storing and retrieving secrets like database credentials.
   - **Automatic rotation** of credentials for RDS databases with zero application downtime — this is a killer f

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips