A Company Runs an Application on AWS

question 419

Multiple Choice

A company runs an application on AWS. An AWS Lambda function uses credentials to authenticate to an Amazon RDS for MySQL DB instance. A security risk assessment identified that these credentials are not frequently rotated. Also, encryption at rest is not enabled for the DB instance. The security team requires that both of these issues be resolved. Which strategy should a solutions architect recommend to remediate these security risks?

• A) Configure the Lambda function to store and retrieve the database credentials in AWS Secrets Manager and enable rotation of the credentials. Take a snapshot of the DB instance and encrypt a copy of that snapshot. Replace the DB instance with a new DB instance that is based on the encrypted snapshot.
• B) Enable IAM DB authentication on the DB instance. Grant the Lambda execution role access to the DB instance. Modify the DB instance and enable encryption.
• C) Enable IAM DB authentication on the DB instance. Grant the Lambda execution role access to the DB instance. Create an encrypted read replica of the DB instance. Promote the encrypted read replica to be the new primary node.
• D) Configure the Lambda function to store and retrieve the database credentials as encrypted AWS Systems Manager Parameter Store parameters. Create another Lambda function to automatically rotate the credentials. Create an encrypted read replica of the DB instance. Promote the encrypted read replica to be the new primary node.

---

Definitions:

Carl Rogers

An influential American psychologist who founded client-centered therapy, emphasizing the importance of the personal growth and self-direction of the client.

SASSI Instruments

SASSI Instruments refer to the Substance Abuse Subtle Screening Inventory, a psychological assessment tool designed to identify individuals who have a high likelihood of substance dependence.

Adolescent Version

Refers to a specific version of a test, assessment, or instrument that is adapted for use with teenage individuals, typically to account for developmental considerations.

MMPI

The Minnesota Multiphasic Personality Inventory, a comprehensive psychological assessment tool used to diagnose mental disorders and personality structure.