SAA-C03 Q555 · Database

Question

A company needs to migrate its customer transactions database from on-premises to AWS. The database resides on an Oracle DB instance that runs on a Linux server. According to a new security requirement, the company must rotate the database password each year. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

**Option B: Migrate to Amazon RDS for Oracle + AWS Secrets Manager with automatic rotation**

This answer satisfies every requirement with minimal operational overhead:

1. **Oracle DB migration**: Amazon RDS for Oracle is a fully managed service that natively supports Oracle databases. This is a **homogeneous migration** (Oracle → Oracle), which is the simplest migration path — no schema conversion or application code changes needed.

2. **Password rotation**: AWS Secrets Manager has **built-in, native integration with Amazon RDS**. When you enable automatic rotation for an RDS database secret, Secrets Manager automatically:
   - Creates the Lambda rotation function for you
   - Configures the rotation schedule
   - Handles the password change on both the Secrets Manager side AND the RDS

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips