SAA-C03 Q60 · Security

Question

A company runs its databases on Amazon RDS for PostgreSQL. The company wants a secure solution to manage the master user password by rotating the password every 30 days. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

**Option C: Integrate AWS Secrets Manager with Amazon RDS for PostgreSQL** is correct because:

1. **Native Integration**: AWS Secrets Manager has a **built-in, native integration with Amazon RDS**. Starting from late 2022, RDS supports managing master user credentials directly in Secrets Manager — you can enable this with a single checkbox in the console or a CLI flag.

2. **Built-in Rotation**: Secrets Manager provides **automatic rotation** out of the box for RDS database credentials. AWS provides pre-built Lambda rotation functions specifically designed for RDS databases. You simply configure the rotation schedule (e.g., every 30 days) and Secrets Manager handles everything.

3. **Least Operational Overhead**: You don't need to write any custom code, manage Lambda functions yourself, o

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips