Home › AWS Solutions Architect Associate › cloudcomputing › securearchitectures › Which AWS feature lets you store and retrieve se…
Which AWS feature lets you store and retrieve secrets (database passwords, API tokens) with automatic rotation hooks for supported targets like Amazon RDS?
AAmazon Kinesis Video Streams
BAWS Secrets Manager
CAmazon S3 with a public bucket policy
DAWS Direct Connect
Answer & Solution
Correct answer: B. AWS Secrets Manager
Secrets Manager stores secrets encrypted with KMS, exposes them via API with IAM access control, and can auto-rotate them on schedule for supported targets (RDS, Redshift, DocumentDB, third-party via Lambda). The other options are unrelated.
Related questions
Which AWS service enables an organisation to enforce a baseline of security configuration Which combination implements defense-in-depth network segmentation inside a VPC for a publA team wants short-lived credentials (15 minutes) for an external CI/CD system running OUTA workload needs to encrypt sensitive S3 objects with keys that the customer creates, rotaAn organisation needs to give a partner read-only access to one specific S3 bucket across Which AWS service is purpose-built to find and classify sensitive data (e.g. PII, credit-cWhich AWS service inspects CloudTrail / VPC flow logs / DNS query logs with ML to detect aAn organisation needs a managed L7 web application firewall to filter SQL injection and cr