Home › AWS Developer Associate › cloudcomputing › awsdevsecurity › Which AWS service is purpose-built to store, ret…
Which AWS service is purpose-built to store, retrieve, and (with supported targets) auto-rotate secrets like database passwords?
AAmazon Polly
BAWS Trusted Advisor
CAmazon Pinpoint
DAWS Secrets Manager
Answer & Solution
Correct answer: D. AWS Secrets Manager
Secrets Manager stores secrets KMS-encrypted, exposes them via API with IAM, and rotates supported targets (RDS, Redshift, DocumentDB, third-party via Lambda). The others are advisory, TTS, and marketing analytics.
Related questions
An S3 bucket policy grants `s3:GetObject` only when the request includes a specific VPC enWhich approach correctly handles environment-specific configuration (DB endpoints, featureAn application must encrypt user-uploaded files in S3 with a key the customer controls (CMWhich IAM feature lets a developer's IAM role temporarily "impersonate" a service-account-A Lambda function reads database credentials at cold start from AWS Secrets Manager and caAn API Gateway REST API needs to require a valid Amazon Cognito ID token on every call. WhWhich IAM construct is best for granting a CodeBuild project the right to read from one spWhich AWS service issues, manages, and auto-renews public TLS certificates for use with AL