SAA-C03 Q607 · Security

Question

A company is designing a new internal web application in the AWS Cloud. The new application must securely retrieve and store multiple employee usernames and passwords from an AWS managed service. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

**Answer D** meets all requirements with the least operational overhead:

1. **Securely store credentials**: AWS Secrets Manager is purpose-built for storing sensitive credentials like usernames and passwords. It provides built-in encryption at rest using AWS KMS, automatic rotation capabilities, and fine-grained IAM access control.

2. **Retrieve multiple credentials efficiently**: The `BatchGetSecretValue` API is a **native Secrets Manager API** that allows retrieving multiple secrets in a single API call. This is straightforward — no additional compute service needed.

3. **Least operational overhead**: The solution uses only Secrets Manager + its native API. No additional services like AWS Batch are required. AWS CloudFormation can be used to provision the infrastructure as code, and t

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips